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WIRELESS LOCATION USMO MULTIPLE CMR8» 

(57) Abstract 

A location system for commercial wireless telecommunication infrastructures (CMRRs). The system is an end-ta«nd solution having 
one or more location systems (42) for outputting requested locations of commercially available hand sets or mobile stati<ms (not shown) 
based on. e.g. AMPS, NAMPS, CDMA or TDMA communication standards, for processing both local mobile station location requests 
and more global mobile station location requests via, e.g., Internet communication between a distributed network of location systems. The 
system uses a plurality of mobile station locating technologies including those based on: two-way TOA and TDOA; home base stations and 
distributed antenna provisioning. Further, the system can be modularly configured for use in location signaling environments ranging from 
urban, dense urban, suburban, rural, mountain to low tFaffic or isolated roadways. Accordingly, the system is useful for 91 1 emergency 
calls, tracking, routing, people and animal location including applications for confinement to and from certain areas. 
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LOCATION OF A MOBILE STATION USING A PLURALITY OF COMMERCIAL 
WIRELESS INFRASTRUCTURES 

REUTED FIELD OF THE INVENTION 

The present invention is directed generaft/ to a system and method for ioating people or objecu, and in panicular to a 
system and method for locating a wireless mobile radio station in a macro base station, distributed antenna, or home base station 
environment. 

BACKGROUND OF THE INVENTION 

Wireless communications systems are becoming increasingly important worldwide. Wireless cellular telecommunications 
systems are rapidly replacing conventional wire-based telecommuniations systems in many applications. Commercial mobile radio 
service provider networks, and specialized mobile radio and mobile data radio networks are examples. The general principles of 
wireless cellular telephony have been described variously, for example in U. S. Patent 5,29SJ 60 to Vendetti, et al. which is 
incorporated herein by reference. There is great interest in using existing infrastruaures for wireless communication systems for 
locating people and/or objects in a cost-effeaive manner. Such a capabifity would be invaluable m a variety of situations, 
especially in emergency or crime situations. Due to the substantial benefits of such a bcation system, several attempts have been 
made to design and implement such a system. Systems have been proposed that rely upon signal strength and trilateralization 
techniques to permit location include those disclosed in Ui. Patents 4,818.998 and 4.908,629 to Apsell et aL ("the Apsell 
patents") and 4,891,650 to Sheffer ("the Sheffer patent"). The Apsell patents disclose a system employing a "homing-in" scheme 
using radio signal strength, wherein the scf»me detects radio signal strength transmitted from an unknown location. This signal 
strength is detected by nearby tracking vehicles, such as police cruisers using receivers with directional antennas. Alternatively, the 
Sheffer patent discloses a system using the FN analog cellular network. This system includes a mobile transmitter located on a 
vehicle to be located. The transmitter transmits an alarm signal upon aaivation to deteaors tecated at base sutions of the cellular 
network. These detectors receive the transmitted signal and transmit, to a central statkm. data indicating the signal strength of the 
received signal and the kientity of the base stations recehring the signal This data is processed to determine the distance between 
the vehicle and each of the base stations and, through trilateralizatbn, the vehicle's positnn. However, these systems have 
drawbacks that include high expense in that special purpose elearonics are required. Furthermore, the systems are generally only 
effea'ive in line-of-sight conditions, such as rural settings. Radio wave surface reflections, refraaions and ground cluner ause 
significant distortion, in determining the location of a signal source in most geographical areas that are more than sparsely 
populated. Moreover, these drawbacks are partkularly exacerbated in dense urban canyon (city) areas, where errors and/or 
conflias in kication measurements can result in substantial inaccuracies. 
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Another example of a location synem using time of arrival and triangulation for location are satellite-based systems, 
such as the military and commercial versions of the Global Positioning Satellite system (GPS). GPS can provide accurate position 
determination (Le., about 1 00 meters error for the commercial version of GPS) from a time-based signal received simultaneously 
from at least three satellites. A ground-based GPS receiver at or near the objea to be located determines the difference between 
the time at which each satellite transmits a time signal and the time at which the signal is received and, based on the time 
differentials, determines the object's location. However, the GPS is impractical in many applications. The signal power levels from 
the satellites are low and the GPS receiver requires a clear, line-of-sight path to at least three satellites above a horizon of about 60 
degrees for effeaive operation. Accordingly, inclement weather conditions, such as clouds, terrain features, such as hills and trees, 
and buildings reuria the ability of the GPS receiver to determine its position. Furthermore, the initial GPS signal detection process 
for a GPS receiver is relatively tong (i.e., several minutes) for determining the receiver's position. Such delays are unacceptable in 
many applications such as. for example, emergency response and vehicle tracking. 

Differential GPS, or D6PS systems offer correction schemes to account for time synchronization drill. Such correaion 
schemes include the transmission of correction signals over a two-way radio link or broadcast via FM radio station subarriers. 
These systems have been found to be awkward and have met with limited success. 

Additnnally, GPS-based h)cation systems have been attempted in which the received GPS signals are transmitted to a 
central data center for performii^ location alcubtions. Such systems have also met with limited success due, for example, to the 
limited reception ol the satellhe signals and the added expense and complexity of the elearonics required for an inexpensive 
bation mobile station or handset for deteaing and receiving the GPS signals from the satelfites. 

The behavior of a mobile radio signal in the general environment is unique and complicated. Efforts to perform 
correlatttn between radk) signals and distance between a base sution and a mobile station are similarly complex. Repeated 
attempts to solve this problem in the pau have been met with only marginal success. Factors include terrain undulations, fixed and 
variable clutter, atmospheric conditions, internal radio charaaeristics of cellular and PCS systems, such as frequencies, antenna 
configurations, modulation schemes, diversity methods, and the physical geometry of direa, ref raaed and refleaed waves between 
the base stations and the mobife. Nobe, such as man-made externally sources (e.g., auto ignitions) and radio system co-channel 
and adjacent channel interference also affea radio reception and related performance measurements, such as the analog carrier-to- 
interference ratio (C/l), or digital energy-per-bit/Hoise density ratio {ii^,) and are particular to various points in time and space 
domains. 

Before discussing real world correlation between signals and distance, it is useful to review the theoretical premise, that 
of radio energy path toss aaoss a pure isotropic vacuum propagation channel, and its dependencies within and among various 
communications channel types. 

Over the last forty years various mathematical expressions have been developed to assist the radio mobile cell designer in 
esublishing the proper balance between base station capital investment and the quality of the radio link, typically using radio 
energy Tield-strength, usually measured in microvolts/meter, or decibels. 

2 
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One consequence from a loation perspeaive is that the effeaive range of values for higher exponents is an increased at 
higher frequencies, thus providing improved granularity of ranging correlation. 

Actual data collected in real-worid environments uncovered huge variations with respea to the free space path loss 
equation, giving rise to the creation of many empirical formulas for radio signal coverage prediaion. Clutter, either fixed or 
S statnnary in geometric relation to the propagation of the radio signals, causes a shadow effea of blocking that penurbs the free 
space loss effect. Perhaps the best known model set that charaaerizes the average path loss is Hata\ "Empirical Formula for 
Propagation loss in Land Hobile Radio", N. Nata, IEEE Jnnsaams^^-l^, pp. 317-325, August 1980, three pathloss models, based 
on Okumura*s measuremenu in and around Tokyo, "FieU Strength and its Variability in VNF and UHF Land Mobile Service'*, Y. 
Okumura, et al, Rivkwofthe EkarkalCommuniammiatofawr/, Vol 16, pp 62S-873, Sept. - Oct 1968. 

1 0 Although the Hata model was found to be useful for generalized RF wave prediaion in frequencies under 1 GHz in 

certain suburban and rural settings, as either the frequency and/or clutter increased, predictability decreased, in current practice, 
however, field technicians often have to make a guess for dense urban an suburban areas (applying whatever model seems best), 
then installing a base stations and begin taking manual measurements. 

In 1991. Ui. Patent S,0SS,8SI to Sheffer taught that if three or more relationships have been established in a triangular 

I S space of three or nrare base stations (BSs) with a loation database constructed having data related to possible mobile station (HS) 
hications, then arculation calculations may be performed, which use three distina P„ measurements to determine an X.Y, two 
dimensional hxation, which can then be projeded onto an area map. The triangulation calculation b based on the fact that the 
approximate distance of the mobile statnn (MS) from any base station (BS) cell can be calculated based on the received signal 
strength. Sheffer acknowledges that terrain variatmns affect accuracy, although as noted above, Sheffefs disclosure does not 

20 account for a sufficient number of variables, such as fixed and variable location shadow fading, which are typical in dense urban 
areas with moving traffK. 

Host field research before about 1988 has focused on charaaeriiing (with the objeaive of RF coverage prediction) the RF 
propagation channel (Le., elearomagnetic radio waves) using a single-ray model, although standard fit errors in regressions 
proved dismal (e.g., 40-80 dB). Later, multi-ray models were proposed, and much later, certain behaviors were studied with radio 

2S and digital channels. In 1981, Vogler proposed that radio waves at higher frequencies could be modeled using optics principles. In 
1988 Walfisch and Bertoni applied optical methods to develop a two-ray model, which when compared to certain highly specific, 
controlled fiekl data, provided extremely good regression fit sundard errors of whhin li dB. 

In the Bertoni two ray model it was assumed that most cities would consist of a core of high-rise buildings surrounded 
by a much larger area having buildings of uniform height spread over regions comprising many square blocks, with street grids 

30 organizing buildings into rows that are nearly parallel. Rays penetrating buildings then emanating outside a building were 
neglected. 

After a lengthy analysis it was concluded that path loss was a funaion of three faaors: I.) the path loss between 
antennas in free space; 2.) the reduanin of rooftop wave fields due to settling; and 3.) the effea of diffraction of the rooftop fields 
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down to ground level 

However, a substantial difficult/ with the two-ray model in praaice is that it requires a substantial amount of data 
regarding building dimensions, geometry, street widths, antenna gain characteristics for every possible ray path, etc. Additionally, 
it requires an inordinate amount of computational resources and such a model is not easily updated or maintained. 
5 Unfortunately, in practice clutter geomet^ and building heights are random. Moreover, data of sufficient detail is 

extremely difficult to acquire, and regression standard fit errors are poor; i.e., in the general case, these errors were found to be 40- 
60 dB. Thus the two^ray model approach, although sometimes providing an improvement over single ray techniques, still did not 
predict RF signal charaaeristics in the general case to level of accuracy desired ( < lOdB). 

Work by Greenstein has since developed from the perspeaive of measurement- based regression models, as opposed to the 

10 previous approach of prediaing-first, then performing measurement comparisons. Apparently yielding to the faa that low-power, 
low antenna (e.g., 12-25 feet above ground) height PG microceil coverage was insufficient in urban buildings. Greenstein, et al, 
authored ''Performance Evaluations for Urban Line-of-sight Microcells Using a Nutd-ray Propagation KodeP, in IEEE Globecom 
Proceedings, 12/91. This paper proposed the idea of formulating regressions based on field measurements using small PCS 
microcells in a lineal microceil geometry (Le., geometries in which there is always a line-of- sight path between a subscriber's mobile 

IS and its current microsite). Additionally, Greenstein studied the communication channels variable Bit- Error-Rate (6ER) in a spatial 
domain, which was a departure from previous research that limited fteld measurements to the RF propagation channel signal 
strci^b alone. However, Greenstein based his finding on two suspicious assumptions: I) he assumed that distance correlation 
estimates were identical for uplink and downlink transmission paths; and 2) modulation techniques would be transparent in terms 
of improved distance correlation conclusions. Although some data held very correlation, other data and environments produced 

20 poor results. Accordingly, his results appear unreliable for use in general ktcation context. 

In 1993 Greenstein, et at, authored "A Heasurement-Based Hodel for Prediaing Coverage Areas of Urban Hicrocetls", in 
the IEEE Journal On Selected Areas in Communtcatbns, Vol. 1 1, No. 7, 9/93. Greenstein reponed a generk measurement-based 
model of RF attenuation in terms of constant-value contours surrounding a given low-power, low antenna microceil environment in 
a dense, readinear neighborhood, such as New York City. However, these comours were for the cellular frequency band. In this 

25 case, LOS and non-LOS clutter were considered for a given microceil site. A resuh of this analysis was that RF propagation losses 
(or attenuation), when cell antenna heights were relatively low, provided attenuation comours resembling a spline plane curve 
depicted as an asteroktt aligned with major street grid patterns. Further, Greenstein found that convex diamond-shaped RF 
propagatkin kiss contoun were a common occurrence in field measurements in a rectilinear urban area. The special plane curve 
asteroid is represented by the formula: 

30 x^ + y^ = r^. However, these results alone have not been suffKiently robust and general to accurately k)cate an 

mobile station, due to the variable nature of urban clutter spatial arrangements. 

At Telesis Technology in 1994 Howard Xia, et al. authored -Microcellular Propagation Charaaeristics for Personal 
Communications in Urban and Suburban Environmenu". in IEEE Transaaions of Vehicular Technology, Vol 43, No. 3, 8/94. which 



SUBSTITUTE SHEET (RULE 26) 



wo 98/10538 



PCT/US97/15933 



performed measurBmenu specifically in the PQ 1.8 to 1.9 GHz frequency band. Xia found corresponding but more variable 
outcome results in San Francisco, Oakland (urban) and the Sunset and Mission Distrirts (suburban). 

The physical radio propagation channel perturbs signal strength, frequency (causing rate changes, phase delay, signal to 
noise ratios (e.g., C/l for the analog case, or E|,^ . RF energy per bit. over average noise density ratio for the digital case) and 
5 Doppler-shift. Signal strength is usually characterized by: 

• Free Space Path Loss (Ip) 

• Slow fading loss or margin {i^iJi 

• Fast fading loss or margin (L^ut) 

10 The cell designer increases the transmitted power P^x by the shadow fading margin L.^^ which is usually chosen to be 

within the 1-2 percentile of the slow fading probability density funaion (PDF) to minimize the probability of unsatisfactorily low 
received power level P^ at the receiver. The P„ level must have enough signal to noise energy tevei (e,g. 10 dB) to overcome the 
receiver's internal noise level (e.g. -I ISdBm in the case of cellular 0.9 GHz), for a minimum voice quality standard. Thus in this 
example must never be betow -108 dBm» in order to maintain the quality standard. 

15 Additionally the short term fast signal fading due to multipath propagation is uken into account by deploying fast 

fading margm L^t* which is typically also chosen to be a few percentiles of the fast fading distribution. The I to 2 percentiles 
compliment other network blockage guidelines. For example the cell base station traffic bading capacity and network transport 
fadfit'ies are usually designed for a 1-2 percentile btockage laaor as well. However, in the woru-case scenario both fading margins 
are simultaneously exceeded, thus causing a fading margin overtoad. 

20 In Roy Steele's, text, Motik Radh Commuaksthm, IEEE Press, 1992, estimates for a GSM system operating in the 1 .8 

GHz band with a iransmhter antenna height of Mm and a mobile station receiver antenna height of 2m, and assumptions 
regarding total path loss, transmitter power would be calculated as follows: 



2S 



Table I: GSM Power Budget Example 



Parameter 


dBm value 


Will require 


*-slow 


14 




Lfast 


7 




>-*path 


110 




Hin.RXpwr required 


-104 








TXpwr- 27dBm 
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Steele^s sample size in a specific urban London area of 80,000 LOS measurements and data reduaion found a slow 
fodin; variance of 

a= 7dB 

» 

assuming log-normal slow fading PDF and allowing for a \A% slow fading margin overbad, ttios 
= 2a = 14dB 

Tlie fast fading margin was determined to be: 
Lfast = 7dB 

In contrast. Xia's measurements in urban and suburban California at 1.8 GHz uncovered flat-land shadow fades on the 
order of 2S-30 dB wfien the mobile station (MS) receiver was traveling from LOS to non-LOS geometries. In hilly terrain fades of 
+ 5 to -50 dB were experienced. Thus it is evident that attempts to correlate signal strength with mobile station rangmg distance 
suggest that error ranges could not be expected to improve below 14 dB. with a high side of 2S to SO dB. Based on 20 to 40 dB per 
decade. Corresponding error ranges for the distance variable would then be on the order of 900 feet to several thousand feet, 
depending upon the particular environmental topology and the transmitter and receiver geometries. 

Although the acceptance of fuzzy logic has been generally more rapid in non-American countries, the principles of fuzzy 
logk can be applied in wireless location. Lotfi A. Zadeh's article. "Fuzzy Sets" published in 1965 in Informtion and Control, vol. 8. 
Pg 338-353. herein incorporated by reference, esublished the basic principles of fuzzy logic, among which a key thorem, the FAT 
theorem, suggests that a fuzzy system with a finite set of rules an uniformly approximate any continuous (or Borel-measureable) 
system. The system has a graph or curve in the space of all combinations of system inputs and outputs. Each fuzzy rule defines a 
patch in this space. The more uncertain the rule, the wider the patch. A finite number of small patches can always cover the curve. 
The fuzzy system averages patches that overlap. The Fat theorem was proven by Bart Kosko, in a paper entitled, "fuzzy Systems as 
Universal Approximators", in Promdit^s of ti» first IEE£ Confenna on fuziy Systems. Pages 1 153-1162, in San Diego, on March, 
1992, herein incorporated by reference. 

Fuzzy relations map elements of one universe, say "X", to those of another universe, say "Y", through the Cartesian 
produa of the two universes. However, the "strength" of the relation between ordered pairs of the two universes is not measured 
with the charaaeristic function (in which an element is either definitely reltated to another elemetn as indicated by a strength 
value of "I", or is definitely not related to another element as indicated by a strength value of "0", but rather with a membership 
f unaion expressing various •'degrees'* of strength of the relation on the unit intergval [0,1]. Hence, a fuzzy relation R is a 

6 
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mapping from the Cartesian space X x Y to the inteival [0,1], where the strength of the mapping is expressed by the membership 
funaion of the retatbn for ordered pairs from the two universes or MR(x,y). 

just as for crisp relations, the properties of commutativity, associativity, distributivity, involution and idempotency ali 
hold for fuzzy relations. Moreover, DeMorgan*s laws hold for fuzzy relations just as they do for crisp (classical) relation^ and the 
S null relations 0, and the complete relation, E, are analogous to the null set and the whole set in set-theretic from, respectively. The 
properties that do not hold for ftiuy relations, as is the case for fuzzy sets in general, are the excluded middle laws. Since a fuzzy 
relation R is also a fuzzy set, there is overlap between a relation and its complement, hence. 

R o R* 0 

10 As seen in the foregoing expression, the excluded middle laws for relation do not result in the null relation, 0, or the 

complete relation, E. Because fuzzy relations in general are fuzzy sets, the Cartesian produa can be defined as a relations between 
two or more fuzzy sets. Let A be a fuzzy set on universe X and B be a fuzzy set on universe Y; then the Cartesian product between 
fuzzy sets A and B will result in a fuzzy relation R, which is contained within the full Cartesian produa space, or 

AxB = R e XxY 

1 5 where the fuzzy relation R has membership function: 

M^^y) = I^a«b(m) = niin (^A(x)»^iB(y)) 

Fuzzy composition can be defined just as it is for crisp (binary) relations. If R is a fuzzy relation on the Cartesian space 
X X Y, and S is a fuzzy relation on the Cartesian space Y x Z, and T is a fuzzy relation on the Cartesian space X x Z; then fuzzy 
max-min composition is defined in terms of the set-theoretic notation and membenhip f unaion-theoretic notation in the following 
20 manner 

^T{x.y) = V (|iB(x,y) A ^s{x,y)) = max { min lHR(x,y), [is(y»z) ] } 

The fmiytxmsionprindpk allows for transforms or mappings of fuzzy concepts in the form y f (x). This principle, 
combined with a compomhml nik ofinfenace, albws for a crisp input to be mapped through a fuzzy transform using 
membenhip f unaktns into a crisp output Additionally , in mapping a cariable x into a variale y, both x and y can be veaor 
2S quantities. 

7 
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SUMMARY OF THE INVENTION 

OBJEaS OF THE INVENTION 

It is an objeaive of the present invention to provide a system and method for determining wireless location using one or 
5 more commercial mobile radio telecommunication systems for accurately locating people and/or objeas in a cost effeaive manner. 
Related objeaives for the present invention include providing a system and method that: 

(1) can be readily incorporated into existing commercial wireless telephony systems with few, if any, modifications of a 
typical telephony wireless infrastruaure; 

(2) can use the native electronics of typical commercially available telephony wireless mobile stations (e.g., handsets) as 
10 location devices; 

(3) can be used for locating people and/or objects residing indoors. 

Yet another objeaive is to provide a low cost location system and method^ adaptable to wireless telephony systems, for 
using simultaneously a plurality of base stations owned and/or operated by competing commercial mobile radio service providen 
within a common radio coverage area, in order to achieve FCC phase 2 accuracy requirements, and for synergistically increasing 
I S mobile station location accuracy and consistency. 

Yet another objective is to provide a low cost location system and method, adaptable to wireless telephony systems, for 
using a plurality of location techniques In particular, at least some of the following mobile sution location techniques can be 
utilized by various embodiments of the present invemion: 

•time-of-arrival wireless signal processing techniques; 
20 •time-difference-of-arrival wireless signal processing techniques; 

•wireless signal processing techniques. 

Yet another objective is to provide a system and method for flexible delivery of loation information to Public Safety 
Answering Points, end users, centralized dispatchers, as well as to agents (either human or mechanized) associated with trigger- 
based inventory and tradcii^ systems. Flexible delivery used here indicates providing location via various two dimensional closed- 
25 form shapes, such as polygons, ellipses, etc, which bound the loation probabilities. In cases where height location information is 
known, the bounding shape may be three-dimensional. 

Yet another objective is to provide a system and method for a variety of new locatbn-based services for public and 
private group safety, including family support functions. 

Yet another objective is to provide a system and method for National Scale Wireless Location capability. Although the 
30 primary focus of this patent is to provide wireless location with accuracy to meet the FCC phase two requirements, a system and 
method is provided that also utilizes roaming signaling to determine in which city is a particular wireless mobile station located. 
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Yet another ofajeaive is to provide and system and method for Parametric-driven, intelligent agent-based iocation 
services. Parameters may include time* iocation, and user-specific and/or group specific criteria. 

Yet another objeaive is to provide a system and method for determining and/or enhancing wireless location using one 
or rrwre of the following: (a.) COHA-based Distributed Antenna technology; (b.) Home Base Stations and AIN technology. 
5 Yet another objective is to provide notifiation messages and/or voice-synthesized call or text paging f unaion to a 

plurality of other mobile station users when a mobile station user travel into, or away from, one or more zones or are within short 
distances of shopping mails, stores, merchandising dealers etc. 

Yet another objeaive is to provide notification messages and/or voice-synthesized call or text paging funaions to a 
plurality of other mobile station users when a mobile station dials a redefined telephone number, such as 91 i, or a cype of "mild 
to emergency cry for help* number. 

Yet another objective is to provide notification messages and/or voice-synthesized call or text paging f unaion to a 
plurality of other mobile station usen when a mobile station user dials a predefined telephone number, such as 311 , or a type of 
mild emergency cry for help number, wherein the plurality of other mobile station users are within a particular distance, or a 
mmimum distance to the mobile station user who dialed the predefined number. 
IS Yet anotlmr oi^ecttve is to provide notification messages and/or voice-synthesized call or text paging f unaion to a 

plurality of other mobile station users when a mobile station user dials a predefined telephone number, such as 3 1 1, or a type of 
mild emergency cry for help number, wherein the plurality of other mobile sution users are within a panicular distance, or a 
minimum distance to the mobile station user who dialed the predefined number, and wherein the other mobile station users are 
provided individualized directional or naviption information from their current locations, to reach to the mobile station user who 
20 dialed the predefined number. 

Yet another objective is to provide automatic home office, vehicle and boat security funaions, which are aaivated and 
deactivated based on a mobile station user's location to or away from a iocation associated with the security funaions. 

Yet another objeaive is to provide notifications (e.g., via fax, page, e-mail, text paging or voice synthesized call 
message), or to setup a group conference call capabilky to a plurality of predefined individuals, based on a mobile station user*s 
25 call to 91 1, or based on a mobile station user's traveling into or away from a location zone or area, or based upon a sensor input 
signal to the user's mobile station, such as a sudden change in G forces, such as falling down, having the car hit another object 
suddenly, air bag deployment, etc. 

Yet another objeaive is to provide loation information to a 'searcher' mobile station user who then further refines or 
narrows the scope of the location/search for a 'target* mobile station, or the mobile station to be located, using a sn»ll microwave 
30 dish, in communication with, or to supplement/replace the searcher mobile sution antenna, whose physical orientation is used to 
further determine the target mobile station location, relative to the searcher's mobile sution position/orientation. 

Yet another objeaive is to provide a means to allow more flexible storage, inventor and enhanced user accessibility of 
renul vehicles, by combining location technology of renul car driver carrying bis/her own mobile station, along with a mobile 
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Station which remains always aaive and fixed to a rental car. By maintaining accurate location records of rental car locations and 
automatic, remote-control of rental cars (or smart cars) which use the mobile station to telemeter control data to and from the car, 
whose doors, doorlocks» and general accessibility are controlled by a centralized computer system, rental cars can be dropped off at 
convenient shopping cemer malls» airport parking lots, hotels and at other conveniem locations. 
S Yet another objeaive is to provide location estimates to users carrying mobile stations, via voice synthesis, data circuit 

messaging or text paging. 

Yet another objeaive is to provide a mechanism whereby mobile station users may access and control their subscriber 
profile for location purposes. The location subscriber profile is a persistent data store which contains logic regarding under what 
criteria will that mobile station user allow his/her location to be made known, and to whom. The mobile station user may access the 
10 location profile via several methods, including Internet means, and mobile sution handset keypad entry and voice recognition 
circuits. 

Yet another objeaive is to utilize signaling deteaion charaaeristics of other COHA base stations and systems in a given 
area, owned and operated by a plurality another commercial mobile radio service provider (CMRS provider). By including other 
CMRS providers* inf rastruaure in the location estimation analysis process, improvements in location accuracy can be realized. 

IS 

DEFINITIONS 

The following definitions are provided for convenience. In general, the definitions here are also defined elsewhere in 
this document as well. 

(1) The term wireless herein is, in general, an abbreviation for digital wireless, and in particular, wireless relers to digital 
20 radio signaling using one of standard digital protocols such as CDHA, TDMA and GSN, as one skilled in the art will understand. 

(2) As used herein, the term mobile station (equivalent^. MS) refers to a wireless device that is at least a transmitting 
device, and in most cases is also a wireless receiving device, such as a portable radio telephony handset. Note that in some contexts 
herein instead or in addition to mobile station, the following terms are also used: personal station (PS), and location unit (LU). In 
general, these terms may be considered synonymous. However, the later two terms may be used when referring to reduced 

25 functbnality communication devices in comparison to a typical digital wireless mobile telephone. 

(3) The term, infrastruaure, denotes the network of telephony communication services, and more particularly, that portwn 
of such a network that receives and processes wireless communications with wireless mobile stations. In particular, this 
infrastruaure includes telephony wireless base stations (BS) such as those for radio mobile communication systems based on CDMA, 
TDMA, and GSM wherein the base stations provide a network of cooperative communiation channels with an air interface with the 

30 mobile station, and a conventional telecommunications interface with a Mobile Switch Center (HSC). Thus, an MS user within an 
area serviced by the base stations may be provided with wireless communication throughout the area by user transparent 
communication transfers (i.e., hand-offs) between the user's mobile station and these base sutions in order to maintain effeaive 

10 
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ttfephony service. The mobile n»itch center provides eonwiuniations and control connectivity among base stations and the public 
telephone network. 

(4) An example of a Parametric-driven imellipnt agent-based location setvice follows: An intelligent agent solware process 
monitors sets of Parametric conditions and location scenarios. When appropriate conditions and location criteria are satisfied, then 
a set of notifications or other actions are triggered to occur. A specific example follows: given that a certain child carrying a mobile 
station should be in a certain school between 8:00 A.M. and J:00 P.M. on regular school days, then a wireless loaiion request is 
imnktd periodially, within the Khool day time frame. If a location request determines that the child's mobile station is located 
substantially outside of the general school area, then a parent/guardian is notified of that fact, and of the child's location via any 
of several methods, such as: (a.) a voke-syMhesized telephone message, (b.) various extranet/internet means, such as electronic 
mail, netcasting. such as the product Castanet, by Marimba Software. Inc. (c.) fax to a pre-deterrained telephone number, or (d.) 
alpha-numeric text paging. 

(5) Commercial mobile radio service (CMRS) service provider is the referenced name of the company that owns and/or 
operates a publicly accesnble wireless system in the cellular or PQ spectrum radio bands. 

SUNMARY DISCUSSION 

The location system of the present invention accomplishes the above and other ol^eaives by the following steps: 
(I .) receiving signal data measurements corresponding to wireless communications between an mobile station to 
be touted (herein also denoted the ta^t mobile station) and a wireless telephony inf rastruaure, wherein the mobite station. BS 
and/or mobile switch cemer may be enhanced in certain mivel ami cost effeanre ways so as to provide an extemled number of 
values characterizing the wheless signal communications between the target mobile station ami the base station inf lastrunure, 
such MrastniauR including multiple, distintt (URS where base stations share a common covnage area; 

(2.) organiz'uig and processing the signal daa ottasurements received from a given target mobile station and 
sumunding base stations so that cnmiiosite wiretess signal characteristic values may be obtained from which target mobile station 
location estimates may be derived, in particular, the signal data measurements are ensembles of samples from the wireless signab 
received from the target mobfle station by the base station mfrastruaure, and from associated base sations wherein these samples 
are subsequently filtered using analog and diptal spectral filtering. (3.) providmg the resultam location estimation characteristic 
values a mobile station hxation estmiate module, wherein each such model subsequently determines the estimate of the loation 
of the target mobile station based on, (or example, the signal processing techniques I. through 2. above. 

Accordingly, steps (1.) and (2.) above are performed by a subsystem of the imrention denoted the Signal Processing and 
Filtering Subsystem (or simply the Signal Processus Subsystem). In particular, this subsystem receives samples of wireless signal 
characteristic measuremenu such as a plurality of relative signal strengths and corresponding signal time delay value pairs, 
wherein sudi samples are used by this subsystem to produce the componem wrth the least amoum of multipath. as evidenced in the 
sample by the short time delay vahie, wherein each such value pair b associated with wireless wgnal transmissions between the 
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target mobile station and a particular base station of a predetermined wireless base station iirfrastruaure. Extremely transient 
signal anomalies such as signal refleaion from tree leaves or the passing of a truck are likely to be filtered out by the Signal 
Processing Subsystem, for example, such an ensemble of data value pairs can be subjected to input cropping and various median 
filters employing filtering techniques such as convolution, median digital, Past f ourier transform, Kadon transform. Gabar 
transform, nearest neighbor, histogram equalization, input and output cropping. Sobel. Wiener, and the like. 

It is a further aspert of the present im^eniion that the wireless personal communication system (PCS) infrastructures 
currently being developed by telecommunication providers offer an appropriate localized infrastruaure base upon which to build 
various personal location systems employing the presem invention and/or utilizing the techniques disclosed herein. In particular, 
the present inventbn is especially suitable for the tocation of people and/or objects using code division multiple access (CDMA) 
wireless infrastructures, although other wireless infrastruaures. such as. time division multiple access (TOMA) infrastructures and 
6$H are also contemplated. Note that COMA personal communications systems are described in the Telephone Industries 
Association standanf l$-95, for frequencies below I GHz. and in the Wideband Spread - Spearum Digital Cellular System Dual-Mode 
Mobile Station-Base Station Compatibility Standard, for frequencies in the 1.8-1.9 GHz frequency bands, both of which are 
incorporated herein by reference. Furthermore, CDMA general principles have also been described, for example, in U. S. Patent 
5,109390, to Gilhausen, et al, and CDMA Network Engineering Handbook by Qualcomm. Inc., each of which is also incorporated 
herein by reference. 

In another aspect of the present invention, in environmenu where a home base station capability exists, then wireless 
location can be provided under certain circumstances, wherein when a mobile station user is within a predetermined range of, for 
example, 1000 feet of his/her premises, the user's mobile station is detected through mobile station receiving elearonics provided 
in, for example, cordless telephone units as being at home. Thus, the bcal public telephone switching network may be provided with 
such informatnn for registering that user is at home, and therefore the mobile station may be allowed to funaion as a cordless 
home telephone utiTuing the local public telephone switching network instead of the base station infrastruaure. According to this 
aspect of the present invention, the location center of the present imrention recenres notification from the local public switched 
telephone network that the mobile station is at or near home and utilizes this notification in outputting a location estimate for the 
mobile station. 

In yet another aspect, the present invention includes a capability for k>cating a target mobile station within areas of 
poor receptun for infrastruaure base stations by utilizing dinributed antennas. A distributed anunna system as used herein is a 
colleaion of antennas attached in series to a reduced funakm base station, wherein the antennas are distributed throughout an 
area for improving tetephony coverage. Such distributed antenna systems are typically used in indoor environments (e.g., high rise 
buildings) or other areas wherein the signal to noise ratio is too high for adequate communication with standard infrastruaure 
base stations. Also a distributed antenna system may be located such that its coverage panern overlaps the area of coverage of 
another distributed antenna system. In such cases each of the overlapping distributed antenna systems includes purposeful delay 
elements to provide different signal delays for each of the overlapping antenna systems and thereby provide muliipath signals with 
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suffrcient delay spread for signal discrimination, as one skilled in the art will understand. Accordingly, the present invention 
receives and utiliics location information communicated from distributed antenna systems for locating a target mobile station. 
That is, the present invention may receive information from the base station infrastructure indicating that a target mobile station is 
communicating with such a distributed antenna system and provide distributed antenna signal charaaeristic values related to the 

5 distributed antenna system. Accordingly, to process such target mobile station location signal data, the present invention includes a 
distributed antenna system for generating u^et mobile station location estimate derived from the location signal data obtained 
from the distributed antenna system. 

The location system of the present invention offers many advantages over existing location systems. The system of the 
present invention, for example, is readily adaptable to existing wireless communication systems and can accurately locate people 

10 and/or objects in a cost-effertive manner. In particular, the present invention requires few. if any, modifications to commercial 
wireless communication systems for implementation. Thus, existing personal communication system infrasiruaure base stations 
and other components of, for example, commercial CDMA infrastructures are readily adapted to the present invention. The present 
invention can be used to locate people and/or objecu that are not in the iine-of-$ight of a wireless receiver or transmitter, can 
reduce the detrimenta! effects of multipath on the accuracy of the location estimate, can loate people and/or objects located 

15 indoors as well as outdoors, and uses a number of wireless stationary transcewers for location. The present invention employs a 
number of distinctly different loation computational models for location whkb provides a greater degree of accuracy, robustness 
and versatility than is possible with existing systems. For instance, the loation models provided include not only the radius- 
radius/rOA and TDOA techniques but also adaptive neural net techniques, further, the present invention is able to adapt to the 
topography of an area in which location service is desired. The present invention is also able to adapt to environmental changes 

20 jubstentially as frequently as desired. Thus, the present imreniion is able to take into account changes in the location topography 
over time without extensive manual data manipulation. 

Moreover, there are numerous additional advantages of the system of the present invention when applied in CDMA 
communication systems. The location system of the present imrention readily benefits from the distina advantages of the CDMA 
spread spearum scheme, namely the exploitation of radio frequency spectral efficiency and isolation by (a) monitoring voice 

25 activity, (b) management of two-way power control, (c) provision of advanced variable-rate modems and error correcting signal 
encoding, (d) inherent resistance to fading, (e) enhanced privacy, and (0 multiple "rake" digital dau receivers and searcher 
receivers for correlation of signal mukipaths. 

Additunally, note that this architeaure need not have all modules co-located. In particular, it is an additional aspect of 
the present invention that various modules can be remotely located from one another and communicate with one another via 

3D telecommunkation transmissions such as telephony technotogies and/or the Internet Accordingly, the present invention is 

particularly adaptable to such distributed computing environments. For example, some number of the location center modules may 
reside in remote locations and communiate their generated hypotheses via the Internet. 

In an alternative embodiment of the present invention, the processing following the generation of location estimates by 

13 
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the modules may be such that this processing can be provided on Internet user nodes and the modules may reside at Internet server 
sites. In this configuration, an Internet user may request hypotheses from such remote modules and perform the remaining 
processing at his/her node. 

Of course, other software architeaures may also to used in implementing the processing of the bcat'ion center without 
departing from scope of the present invention. In particular, object-oriented architeaures are also within the scope of the present 
invention. For example, the modules may be objea methods on an mobile station location estimator object, wherein the estimator 
object rweivcs substantially all target mobile sutbn location signal data output by the signal filtering subsystem 20. 
Alternatively, software bus architectures are contemplated by the present invention, as one skilled in the art will understand, 
wherein the software architeaure may be modular and facilitate parallel processing. 

One embodiment of the present invention includes providing the location ol a mobile station (MS) using the digital air 
interface voice channel and an automatic call distributor device. This embodiment provides location information to either the 
initiating caller who wishes to learn of his location, using the voice channel, and/or location information could be provided to 
another individual who has either a wireline or wireless telephone station. 

Another embodiment of the present invention includes providing the location of a mobile station using the digital air 
interface voice channel and a hunt group provided from a central office or similar device. This embodiment provides location 
information to either the initiating caller who wishes to team of bis location, using the voice channel, and/or location information 
could be provided to another iodivulual who has either a wireline or wireless telephone statbn. 

Another embodiment of the present invention includes providing the loation of a mobile station using the digital air 
interface text paging, or short message service channel and a hunt group provided from a central office or similar device. This 
embodiment provides location information to either the initiating caller who wishes to learn of his location, using the voice channel, 
and/or location information could be provUed to another indhridual who has either a wireline or wireless telephone station. 

Another embodiment of the present invention inchides providing the location of a plurality of mobite stations using the 
public Internet or an intranet, with either having the ability to further use "push", or "netcasting" technology . This embodiment 
provides location information to either the initiating Internet/Intranet user who wishes to learn of one or more mobile station 
locations, using either the Internet or an intranet Either the mobile station user to be located can initiate a request for the user to 
be located, or an Internet/intranet user may initiate the location request. Optionally the location information could be provided 
autonomously, or periodically, or in accordance with other logic criteria, to the recipient of the location information via the 
Internet or a intranet As a further option, location information can be superimposed onto various maps (e.g., bit/raster, veaor, 
digital photograph, etc.) for convenient display to the user. 

Yet another embodiment of the present invention includes providing a multiGst notification to a group of mobile 
station users, based on distress call from a particular mobile station, wherein the group of mobile nation users are relatively 
nearby the distress caller. The multicast notification provides individual direaions for each group mobite station user, to direa 
each user to the fastest route to reach the distressed aller. 

14 
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Further features and advantages of the present invention are provided bf the figures and deuiled description 
accompanying this invention sumina7. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. I illustrates an overail view of a wireless location system and method for using multiple commercial mobile radio 
5 seivice providen; 

Fig. 2 shows is a high level wireless location architeaure using the intelligent network, which illustrates aspeas of the 
home base station and Internet conneaivity for receiving location requests and for providing location estimates; 

Fig. 3 illustrates how the signals from the base stations associated with various multiple commercial radio service 
providers can be shared with the wireless location system to provide an improved geometry and thus improved wireless location 
10 aauracy. 

Fig. 4 shows how the mobile station database in the location system is updated via interfaces in communication with 
multiple commercial mobile radio service providen using customer are systems. 

Fig. 5 shows a method of direa access to multiple CMRS base statbns, from the location system perspenive, thus 
avoiding the need to significantly modify network infrastruaure systems. 
15 Fig.6 illustrates physical components and the effeas of predetermined signal delay, and toul system delay in a 

distributed antenna environment for purposes of wireless location; 

Fig. 7 shows the timing relationships among the signals within a distributed antenna system. 

Fig. 8 shows a flowchart of the methods and procedures required to implement a DA database; 

Fig. 9 illustrates an exemplary DA configuration with a direa antenna conneaion to the base stations; 
20 Fig. 1 0 illustrates an alternative DA configuration using multipoint microwave; 

Fig. 1 1 illustrates how multiple base stations could be used via a microwave circuit to provide PCS and tocation service 
to a multilevel buikiing via virtual pitot channels; 

Fig. 12 shows the DA delay spread ranges possible for a SOO microsecond guard zone; 

Fig. 13 shows DA-cell byout a geometry and how location geometries can be construaed; 
25 Fig.l4 illustrates the realization of aaual measurements and classification utilized within DA cell ranges to determine a 

percent range within each cell. 

Fig. IS shows the standard components of a CDHA MS. 

Fig. 16 shows one embodiment for MS modifiation that facilities enhanced Rf measurement telemetry. 
Fig. 17 shows how the LC is used in a Home Base Station architeaure. 
30 Fig. 18 illustrates a typical case where signals from three base statbns can be detected. 

Fig. 19 illustrates a typical ase where signals from four base stations (including remaining set information) can be 

detected. 

IS 
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Fig. 20 shows a HS deteaion scheme with a two base station geometry. 

Fig. 21 illustrates a typical amorphous location area wKh only the signal deteaion of a single base station seaor* by a 

HS. 

Fig. 22 shows a series of typical reverse path CDMA RF measurements in a dense urban area. 
5 Fig. 23 shows a series of typical reverse path CDHA RF measurements in a rural setting. 

Fig. 24 shows a typical Location Center conneaion to a CTIA Model. 
Fig. 25 shows a typial national Location Center and relevant network conneaions. 
Fig. 26 illustrates a typical three dimensional delay spread profile. 

Fig. 27 shows the magnifying effects of convoluting s'unilar-property forward and reverse path three-dimensional 

10 images. 

Fig. 28 illustrates an image and relief representation of a CDMA Delay Spread Profile. 
Fig. 29 illustrates the main components of the Signal Processing Subsystem 20. 

Fig. 30 illustrates an image based on an Rf signal measurement sample set, before image histogram equalization 
filtering is applied. 

IS Fig. 31 illustrates an image based on an RF signal measurement sample set, after image histogram equalization input 

cropping filtering is applied. 

Fig. 32 illustrates an image sample grid before image filtering. 

Fig. 33 shows a CDHA profile image after input cropping is used at a level of SO percent 

Fig. 34 illustrates the results of combining input cropping at 40 percent, then performing four by four median filtering 

20 on the resultant. 

Fig. 3S shows the results of combining input cropping at SO percent with four by four median filtering. 

Fig. 36 illustrates how location estimates can be provided using voice channel conneaions via an ACQ and Internet 

technology. 

Fig. 37 shows wireless Location of a HS using the Voice Channel from a Hunt Group. 
2S Fig. 38 illustrates how location information can be provided via Text paging or shon message service messaging. 

Fig. 39 shows how loation information of an HS can be provided via Internet via **Push" technology. 

Fig. 40 illustrates how location directions can be provided to nearest members, regarding direaions for each individual 
member to reach a distressed HS aller. 

Fig.4l illustrates how traveling instructions from two different points can be provided to an initiator. 
30 Fig.42 illustrates how wireless location services can be used to facilitate automotive rental car tracking and control. 

Fig. 43 indiates the addition of a fuzzy bgic module which discretizes the wireless location estimate output from the 
TOA/FDOA bcaton estimator module. 



16 
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DETAILED DESCRIPTION 

Various digiul wireleu communication standards have been introduced such as code division multiple access (CDMA) 
and Time DWision Multiple Access (TDMA) (e^^ Global Systems Mobile (GSM). These standards provide numerous enhancements 
for advancing the quality and communication cafiacity for wireless applications. Referring to CDMA, this sundard is described in 
5 the Telephone Industries Association standard IS-95, for frequencies below I GHz, and in J-STD-008, the Wideband Spread- 
Speanim Digital Cellular System Dual-Mode Mobile Station-Base station Compatibility Standard, for frequencies in the 1.8-1.9 
GHz frequency bands. 

Additionally, CDMA general principles have been described, for example, in Ui. Patent 5.109390, Diversity Receiver in a 
CDMA Cellular Telephone System, by Gilbousen. There are numerous advantages of such digital wireless technologies such as CDMA 

1 0 radio technology. For example, the CDMA spread spectrum scheme exploits radio frequency spearal efficiency and isolation by 
monitoring voice aaivity, managing two-way power control, provision of advanced variable-rate modems and error correaing 
signal design, and includes inherent resistance to fading, enhanced privacy, and provides for multiple "rake" digital data receivers 
and searcher receiven for correlation of multiple physical propagation paths, resembling maximum likelihood deteciion, as well as 
support for multiple base station communication with a mobile station. i.e.. soft or softer hand-off capability. When coupled with 

15 a location center as described herein, substantial improvements in radio location can be achieved. For example, the CDMA spread 
spertrum scheme expkiits radio frequency spertral efficiency and isolation by monitoring voice aaivity. managing two-way power 
control, provision of advanced variable-rate modems and error correaing signal design, and includes inherent resistance to fading, 
enhanced privacy, and provkles for multiple "rake" digital data receivers and searcher receivers for correlation of multiple physical 
propagation paths, resembling maximum likelihood deteaion. as well as support for multiple base station communication with a 

20 mobile station, i.e., soft hand-off capability. Moreover, this same advanced radio communication infrastructure can also be used 
for enhanced radio tocation. As a further example, the capabilities of IS-41 and AIN already provide a broad-granularity of wireless 
locatwn. as is necessary to, for example, properly direa a terminating call to a mobile station. Such information, originally 
intended for call processing usage, can be re-used to conjunaion with the location center described herein to provkle wireless 
tocation in the large (le., to determine which country, state and city a particular mobile station is located) and wireless location in 

25 the small (i.e., which tocation, plus or minus a few hundred feet within one or more base statktns a given mobile station is located). 
Hg. I illustrates a wireless bcation network using two commercial mobile radb service provider networks for the 
present invention. Aaordingly, this Tigure illustrates the interconnections between the components of a typical wireless network 
configuration and various aimponents that are specific to the present invention. In panicular, as one skilled m the art will 
understand, a typial wireless network includes: (a) a mobile switthing center (MSQ 12a; (b) generally a service control point 4a. 

30 and base nations (not shown) which are in communication with a mobile switch center 12a. Within a typical metropolitan area it is 
also common for a second commercial mobile radio service (CMRS) provkier to offer wireless service within essentially similar 
coverage areas, such sysrems typ'olly including an mobile switch center 12b, service control point 4b. and associated base stations 
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(not shown). Added to this wireless network, the present invention provides the following additional components: 

(I) a location s)rstem or center 42 which is required for determining a location of a target mobile station using 
signal characteristic values as measured by the target mobile station (not shown) and neartyy base stations (not shown), further 
consisting of the following modules or subsystem components: 
S (I.I) an application programming interface 14, for physically interfacing with and controlling the messaging to and 

from each CMRS mobile switch center 12a, 12b. service control points 4a and 4b, receiving loQtion requests from either the mobile 
switch center 12a. or 12b. or the Internet 68. and providing conneaion to the signal processing subsystem 20; 

(I J) a signal processing subsystem 20, which is in communiation with the application programming interface 
(API) 14. The signal processor 20 receives, queues, filters and processes signal measurement messages into various formats suitable 
10 for the location estimate modules DA 10 and TOA/IDOA 8; 

(13) a TOA/TDOA location estimate module 8, in communication with the signal processing subsystem 20. The 
TOA/TDOA module 6 provides a location estimate result, using a time of arrival or a time difference of arrival technique based on 
conditioned signals from the signal processing subsystem 20; in addition the TOA/TDOA module may also process signals from the 
distributed antenna module 10, in order to provide a location estimate within environments containing distributed antenna 
IS systems; 

(L4) a distributed antenna (DA) module 10, which receives signals related to distributed antennas, from the signal 
processor 20 in communication a location estimating capability for utilizing one or more distributed antenna systems 1 68 as shown 
in Fig. 2> wherein each such system 168 provides wireless location information lor an MS 140 within the area in communkation 
with one or more distributed antenna system 168. 

20 (1.5) a home base station module (HBS) 6 in Fig. I, which receives signals from the controller 14 and determines 

wireless location (ue., providing a location estimate result) based on registration principles of the wireless user's mobile station 
when in communiation with the user's home base station (not shown) in commoniations with a given service control point 4a or 
4b. containing ahome base station application (not shown). 

Since home base stations and distributed antenna systems can be located on potentially each floor of a multi'$to7 building, 

2S in such cases where infrastruaure is installed, the wireless loation technology described herein can be used to perform location in 
terms of height as well as by Latitude and Longitude. 

Referring to Fig. 2. additional detail is provkfed of typical base station coverage areas, seaorization. and high level 
componenu used in the present invemion's scope, including the mobile switch center 1 12, a mobile station 140 in communication 
with a home base station 160, and communication between the location system 42 and the public Internet 468. via an Interne: 

30 service provider interface 472. A novel aspea of this invention includes providing wireless location estimate information to various 
designated users via the public Internet Although base stations may be placed in any configuration, a typical deployment 
configuration is approximately in a cellular honeycomb panern, although many praaical tradeoffs exist, such as site availability, 
versus the requirement for maximal terrain coverage area. To illustrate, such exemplary base stations (BSs) 122a through 122g are 
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Shown, each of which radiate referencing signals within their area of coverage to facilitate mobile station (MS) MO radio frequency 
connectivity, and various timing and synchronization funaions. A given base station may contain no seaors (not shown) , thus 
radiating and receiving signals in a 360 degree omnidireaional coverage area pattern, or the base station may contain "smart 
antennas" (not shown) which have spedatized coverage area patterns. 

5 Alternatively and generally most frequent are base stations having three sertor coverage area patterns. Shown in Fig. 2. 

each sector for base stttion 122a through I22g contains three sectors, labeled a, b, and c, which represent antennas that radiate 
and receive signals in an approximate 120 degree arc, from an overhead view. As one skilled in the art will understand, actual base 
station coverage areas generally are designed to overlap to some extent, thus ensuring seamless coverage in a geographical area. 
Control elearonics within each base station are used to communicate with a given mobile station 140. Further, during 

10 communication with the mobile station the exact base station identification and seaor identification information are known and 
are provided to the location center 142. 

The base stations tocated at their cell sites may be coupled by various transport facilities 176 such as leased lines, 
frame relay, T-Carrier links, optical fiber links or by microwave communication links. 

When the mobile sution is powered on and in the idle state, it constantly monitors the pilot signal transmissions from 

I S each of the base stations located at nearby cell sites. As illustrated in fig. 3, base station/sector coverage areas may of ren overlap 
both in the context of a single CMfU base station network, and also in the context of multiple CMRS base station networks, thus 
enabling mobile stations to detea, and, in the case of certain technologies, ammuniate simultaneously ateng both the forward 
and reverse paths, with multiple base sution^/sectors, either with a single CMRS network or, in the case of hand-off s and roaming, 
multiple CMRS network equipment. In fig- 3 the constantly radiating pitot signals from base station seaors 122a, 122b and 122c are 

20 delectable by mobile station 140 at its location. The mobile station 140 scam each pikit channel, which corresponds to a given base 
station/sector ID, and determines which cell it is in by comparing signals strengths of pilot signals transmitted from these 
particular celUsites. 

The mobile station 140 then initiates a registration request with the mobile switch center 1 12, via the base statmn 
controller 174. The mobile switch center determines whether or not the mobile station 140 is allowed to proceed with the 
25 registrat'mn process (except in the case of a 91 1 call, wherein no registration process is required). At this point alls may be 
originated from the mobile statnn 140 or calls or short message servke messages can be received from the mobile switch center 
III 

As shown in Fig. 2, the mobile switch center 1 12 communicates as appropriate, with a class 4/S wireline telephony circuit 
switch or other central offices, with telephone trunks in communication with the public switch telephone network (PSTN) 24. Such 
30 central offices connea to wireline stations, such as telephones, or any communication device compatible with the line, such as a 
personal or home base station. The PSTN may also provide conneaions to long distance networks and other networks. 

The mobile switch center 1 12 may also utilize IS/41 data circuits or irunb 522, which in turn conneas to a service 
control point 104, using, for example, signaling system #7 (SS7) signaling link protocols for intelligent call processing, as one 

19 
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skilled in the art will understand. In the case of wireless advanced intelligent network (AIN) services such trunks and protocols are 
used for all routing imtruauns of calls interaaing with the mobile switch center 112 or any switch capable of providing service 
switching point funaions, and the public switched telephone network (PSTN) 24, with possible termination back to the wireless 
network. In the case of an mobile station 140 in communiation with a corresponding home or office base station (HBS) 160, the 
HBS 160 controls, processes and interfaces the mobile statran 140 to the PSTN 24. in a manner similar to a cordless telephone 
system, except that added AIN logic within, for example, the service control point (SCP) 1 04 is used to determine if the mobile 
statwn 140 is being controlled by the HBS 160 or a wireless base station 122. Regarding non-HBS calls, the mobile switch center 1 12 
may direaalls between mobile stations 140 via the appropriate cell site base stations 122 a through I22h since such mobile 
statwns 140 do not typically communiate direaly with one another in such wireless standards as COMA, TDMA NAMPS, AMPS and 
GSfl. 

Referring again to Fig. 2, the Location system 42 interfaces with the mobile switch center 112 either via dedicated 
transpon facilities I7B, using for example, any number of LAN/WAN technologies, such as Ethernet, fast Ethernet, frame relay, 
virtual private networks, etc.. or via the PSTN 24 (not shown). The location system 42 receives autonomous (e.g., unsolicited) 
autonomous or command/response messages regarding, for example: (a) the wireless network states, including for example, the 
fart that a base station has been taken in or out of service, (b) mobile sution 140 and BS 122 radio frequency (RF) signal 
measurements, notifications from a SCP 104 indicating that an HBS 160 has deteaed and registered with the SCP 104 the mobile 
station 140 arresponding to the HBS 160, and (c) any distributed antenna systems 168. Conversely, the location system 42 
provides data and control information to each of the above components in (a) * (c). Additionally, the Locatk>n system 42 may 
provide \amm infonnatran to an mobile station 140, via a BS 122, using, for example the short message service protocol, or any 
dau communicatbn protocol supported by the air interface baetween the base station and the mobile station. Interface 106 
conneaing the tocation system 42 with the service control point 104 may also be required in the event the home location register 
and/or the home base statnn AIN funaion is k)cated in the SCP 104. 

Assuming the wireless technobgy CDHA is used, each BS 122a, 122b. 122c, through I22g uses a time offset of the pitot PN 
sequence to klentify a forward CDHA pitot channel. Furthermore, time offsets, in CDMA chip siies, may be re-used within a PO 
system, thus providi!^ efTicient use of pitot time offset chips, thus achieving spearum efficiency. 

The use of distributed antennas is another technique for improving or extending the RF coverage of a radio coverage area 
120 of a wireless system. Such distributed antennas are typkally used in buildings or other areas of dense clutter, such as 
numerous walls, partitions and/or similar stniaures causing substantial signal attenuation. As shown in Figs. 6. 9. 10. 1 1, and 13. 
distributed antennas 168 are typkally connected together in a serial fashion for communiating with one or more infrastruaure 
base stations !22. Dbtributed atennnas may be conneaed to the mobile switch center 1 12 via varnus air interfaces, as shown in 
Figs. 10 and 1 1, or altemat'nrely distributed antennas may be conneaed to the MSC via a direaed conneann to a base station 122 
as shown in fig. 9, or via a private branch exchange (PBX) as shown in Fig. 13. 

Referring to Fig. 1 1, distributed antennas 1 68 are useful panicularly in wireless system configurations involving 

20 
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fflkrocells. and potentially indoor environmems. $och as wi«le« systenn in communiation with private branch exchange systems 
(reference Fig. 13) in business offices, and in wireless loal loop applications (not shown) as one skilled in the art will understand. 
Mditbnaily. a distributed antenna embodiment an provide significant improvements in decreasing location error, as compared 
with an imioor mobile station 140 (reference Fig. 1 1) user with a wireless connection to an outdoor, infrastruaure base station 122. 
S as illustrated in Figs. 1 1, 12, 13 and 14. 
MOBILE STATION DESCRIPTION 

As an example of a mobile stanon 140, such a mobile station win be described using (BHA technology. Fig. 15 
illustrates a typical block diagram of the functional components of a CDMA mobile station (MS) 140. based on the patent. 
"Diversity Receiver in a CDMA Cellular Telephone System", parent mimber 5.109390. The MS 140 conuins an amenna 510 coupH 
10 through diplexer 512 to analog receiver 514 and transmit power amplifier 516. Anrenna'siO and diplexer 512 permit simultaneous 
transmission and reception of signals through an anrenna 510. Antenna 510 collects transmitted signals and provides them through 
diplexer 512 to analog receiver 514. Receiver 514 receives the Rf frequency sigmils. typially either in the 800-900 MH2 or 1.8-1.9 
GHz band, from diplexer 512. for am|rfification and frequency down comrersion to an intermediate frequency (If). Translation is 
accomplished through the use of a frequency synthesizer of standard design which permits the receiver 514 to be tuned to any of 
15 the frequencies within the designated receive frequency band. The IF signal is passed through a surface acoustic wave bandpass 
filter, typically of 1^5 MHI bandwidth, to match the waveform of the signal transmitted by a base station 122. Receiver 514 also 
provides an anahig to d«ital converter (not shown) lor convening the IF signal to a digital signal. The digital signal is provided to 
each of four or more data receiven (520, 522, 524, and 526). one of which is a searcher receiver (526) with the remaimler being 
data receivers, as one skilled in the art will understand. 
20 Analog receiver 514 also performs a open-loop type of power control function lor adjusting the transmit power of the 

mobile station 140 on the reverse link channel. Receiver 514 measures the forward link signal strength of the signals from base 
stations 122. then generates an anahg power comrol signal to circuitry in the transmit power amplifier 516. which can effect a 
rang^ up to about 60 dB. The power control for the transmit power amplifier 51 6 is also supplemented by a closed-loop power 
control or mobile atrenuation code (MAC) conuol parameter sent to the mobile station 140 via the air (i.e.. wireless) interface from 
25 a BS 122. with either the CMAC or VMAC command (as one towwledgeable in CDMA standards will understand). The MAC an take on 
ora> of eight values 0 through 7, which effect a ctosed toop to raise or lower the power correaion. The transmit amplifier 516 may 
utilize one of three transmit power classes when transmitting within a transmitted power control group in the 800-900 MHZ 
cellular band: class I (I to 8 dBW). dass II (-3 to 4 dBW). or class III (-7 to 0 dBW). for a closed-loop range of about " 32 dB. In 
the PCS 1.8-1.9 GHz bami five classes are defined: class I (-2 to 3 dBW). class II (-7 to 0 dBW). class III (-12 to -3 dBW). class IV (- 
30 17 to -6 dBW), class V (-22 to -9 dBW). for a dosed-toop range of about " 40 dB. The mobile station 140 power class ami transmit 
power level for a communicating mobile sution 140 is taiown to the wireless infrastruaure network, and may be utilized for 
lootion estimation, as is described hereinbeiow. 
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The digitized JF signal may contain the signals from several telephone calls together with the pilot channels and 
fflultipath delayed signab from each of several pilot channels. Searcher receiver 526, under conrrol of control processor S34. 
continuously scans the time domain around the nommal time delay offsets of pitot channeb contained within the aaive, candidate, 
neighboring and remaining sets of pilot channels. The initial sets of pilot channeb and a defined search window size for each set are 
provided by a control message from a BS 122 via the air interface to the mobile station 140. The searcher receiver 526 measures the 
strength of any reception of a desired waveform at times other than the nominal time and measures each pilot channel's arrival 
time relative to each pilot's PN sequence offset value. Receiver 526 also compares signal strength m the received signals. Receiver 
526 provides a signal strength signal to control processor 534 indicative of the strongest signals and relative time relationships. 

Control processor 534 provides signals to control digiul data receivers 520. 522 and 524 such that each of these 
rKeivers processes a different one of the strongest signals. Note, as one skilled in the art will understand, the strongest signal, or 
finger, may not be the signal of shortest arrival time, but rather may be a refleaed, and therefore delayed, signal (such reflected 
denoted collectively as "multipath"). Data receivers 520. 522 and 524 may track and process multipath signals from the same 
forward channel pilot channel offset or from a different forward channel pilot offset. In the case where a different pilot channel 
offset signal is of greater strength than the current cell site (or more specifically the current base station 122) pilot channel offset, 
then control processor 534 generates a control message for transmission on a revene channel from the mobile station 140 to the 
current BS 122, requesting a transfer of the call, or a soft hand-off. to the now strongest cell site Base station 122. Note that each of 
the four receivers 520» 522, 524 and 526 can be directed independently from each other. The three data receivers 520. 522. and 524 
are capable of tracking and demodulating multipath signab from of the forward COMA pilot channel. Thus data receivers 520. 522 
and 524 may provide reception of information via separate multipath signab from one BS 122 (e.g.. in particular, an antenna face 
of a seaored antenna at the BS 122, or reception of signab from a number of sectors at the same BS 122, or reception of signab 
from multiple BSs 122 or their antenna faces of seaored antennas. Upon receiving a CDMA pilot measurement request order 
command, or whenever (a) the mobile station 140 deteas a pilot signal of sufficient strength, not associated with any of the 
assigned forward traffic channeb currently assigned, or (b) the mobile station 140 is in preparation for a soft or hard hand-off, 
then the searcher receiver 526 responds by measuring and reporting the strengths of received pilots and the receiver's definition of 
the pilot arrival time of the earliest useable multipath component of the pilot, in units of PN chips (one chip = 0.813802 
microseconds). The receiver 526 computes the strer^h of a pilot by adding the ratios of received pilot energy per chip E^, to total 
received spearal density, 1^, of at most k useable multipath components, where k is the number of data receivers supported in the 
mobile sution 140. 

The outputs of data receivers 520, 522, and 526 are provided to diversity combiner and decoder circuitry 538 (i.e., 
simply divenity combiner). Tte diversity combiner 538 performs the function of adjusting the timing of a plurality of streams of 
receded signals into alignment and adds them together. In performing thb funaion, the diversity combiner 538 may utilize a 
maximal ratio diversity combiner technique. The resuhing combined signal stream b then decoded using a forward stream error 
detection contained within the diversity combiner. The decoded result is then passed on to the user digital baseband circuitry 542. 

22 
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The user digital baseband circuitry 542 typically includes a digital vocoder which decodes the signals from diversity 
combiner 538, and then outputs the results to a digital to analog (D/A) converter (not shown). The output of the D/A serves as an 
interface with telephony circuitry for providing nwbile station 140 user analog output information signals to the user 
corresponding to the information provided from diversity combiner 538. 
5 User analog voice signals typically provided through an mobile station 140 are provided as an input to baseband 

circuitry SAL Baseband 542 serves as an interface with a handset or any other type of peripheral device, to the user for audio 
communication. Baseband circuitry 542 includes an analog to digital (A/D) converter which converts user information signals from 
analog form into a digital form. This digital form is then input to a vocoder (not shown) for encoding, which includes a forward 
error correaion funaion. The resulting encoded signals are then output to transmit modulator 546. 

10 Transmit modulator 546 modulates the encoded signal on a PN carrier signal whose PN sequence is based on the 

assigned address funaion for a wireless all. The PN sequence is determined by the control processor 534 from call setup 
informatbn that was previously transmitted by a cell site BS 122 and decoded by the receivers 520, 522, 524 as one skilled in the 
art will understand. The output of uansmit modulator 546 is provided to transmit power control circuitry 550. Note that signal 
transmission power is controlled partially by an open-ioop analog power control signal provided from receiver 514. In addition, 

15 control bits are also transmitted by the controlling BS 122 in the form of a supplemental closed-loop power adjustment command 
and are processed by (hta receivers 520, 522^ In response to this command, comrol processor 534 generates a digital power 
control signal that b provided to the transmit power amplifier 516. Transmit power control 550 also provides the digitized and 
encoded user information signab in an IF format to output to the transmit power amplifier 51 6. The transmit power amplifier 516 
inverts the IF format signals into an RF frequency by mixing thb signal with a frequency synthesizer (not shown) output signal for 

20 providing a corresponding signal at the proper output transmission frequency signal. Subsequently, transmit power amplifier 5 1 6 
amplifies the signal to the final power output level. The transmhsion signal b then output from the transmit power amplifier 51 6 to 
the diplexer 512. The dipkxer 5 12 then couples the transmbsion signal to antenna 5 10 for air interface transmission to the 
infrastruaure base sutions 122. 

Additnnally, note tint control processor 534 b also responsive to various control and information request messages 

25 from the controlling BS 122, including for example, sync channel messages, the system parameten messages, in-traffic system 

parameten messages, paging/alert messages, regbtration messages, status requests, povrer comrol parameten messages and hand- 
off direaion messages, as one skilled in the art will understand. 

Referring still to a CDNA mobile station 140, in one embodiment of the present invention, the above-described standard 
CDI1A molHle station architeaure in an mobile station 140 is sufficient However, in a second embodiment, this architeaure ma/ 

30 be modified in minor, cost effective ways so that additional information may be transmitted from an mobile station 140 to the BS 
122. The modifications for thb second embodiment will now be described. The following modifications, either together or in any 
combination, provide improvements in location accuracy from the perspeaive of capturing RF measurement data: ( I) increasing 
measurement quantity, { 2) improving measurement transmission. ( 3) extending the pilot set and search, ( 4) extending the pilot 
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signal reporting capabilities, 5) decreasing the Quantization size of the units used to report the pilot PN phase arrlvai time, 6) 
improving the accuracy of the mobile and base station time reference, and 7) increasing the number of data receivers and related 
circuitry, for correlation tracidng of a iarger plurality of pilot channels and each of their multipath signals. 

Using the standard system parameters overhead message in the paging channel as one method of leponing to the base 
S station the signal strengths and delays of detectable pilot channels, a mobile station has various timers indicating the upper bounds 
of time needed to respond to a request, and to bid for access to the forward channel (if not already using it's assigned traffic 
channel). These timers restrid the frequency of measurement reponing and thus limit the aggregate amount of measurement data 
which an be sent in a given time period. 

For example, CDMA standard timer T^j^ establishes the maximum time of a mobile station to enter the update overhead 
10 information substate of the system access state to respond to messages received while in the mobile station idle state* typically 03 
seconds. Timer T^em> maximum time for the mobile station to respond to one service option request, is typically 0.2 sKonds. 
Thus during a period of about five seconds, this measurement reporting method would provide for a maximum of about fifteen 
measurements. 

However the same CDMA receiver design infrastruaure. with slight circuitry modification can be used to support 
15 improved measurement transmission. 

In order to collect a data ensemble of RF measurements that represents a statistically significant representation of data 
values in a geographical area of interest, it is the intention that the second (CDtIA) mobile station 140 embodiment be capable of 
sending to the network base station infrastruaure approximately 126 samples of each multipath peak signal strength and its 
relative delay, for each detectabfe pitot channel, in less than a preferred period of about five seconds. In order to transmit this 
20 amount of data, other means are needed to efficiently send the needed dau to the network (i.€., from the mobile sution to the 
hase station* and then to forward data to the wireless switch, and then to forward data to the Location Center). 

The CDMA air interface standard provides several means for transmitting dau at higher rates. The Data Burst message 
can be used, or various blank-and-burst, dim-and-bunt multiplex options can be used, and well as seleaing various service options 
2 through 9, through the setup of a normal voice or data telephone call. In one embodiment, , the user dials a speed number 
2S fepresentmg a data-^pe call to the Locatnn Cemer 142, which initiates a command to the mobile station 140, responsive by the 
moh'le statbn 140, which then provides the tocation center 142, via the base staion 122. mobile switch center 1 1 2 with the needed 
measurement data. 

Referring to Fig. 16, in one embodiment a software controllable data conneaion or path 49 is established between the 
controi processor 46, and the user digital baseband 30 f unaional components in the mobile station, a much hirger quantity of RF 
30 measurements, on the order of 128 iteta samples, can be transmitted as a dau burst, multiplexed, or sent by other means such as a 
data circuit all, back to the network, and to the Location Cemer. Note that the existing conneaion between the control processor 
534 and the transmit modulator 546 may also be used, as well via any other virtual path, such as software register-to-register 
move inuruaions, as long as sufficient signal measurement content and dau samples can be sent to the wireless network and the 
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location center 142 via the associated interfaces. Those skilled in the art will understand the wireless network consists of the base 
station, mobile switch center, and related infrastruaure equipment, interfaces and facilities circuits to telemeter the measurement 
content and data samples to the location center \A2. Additional design issues include, for example, the faa that existing memo^ in 
the mobile statbn must be a)k)cated to the temporary storage of RF sample measurements, and new control means, such as 
seleaing a future use control htt panern in the CDMA air standard, are required to telemeter, preferably upon command, RF 
measurement sample data to the Location Center 142 in Fig. I. In the case where a kKation request is received by the location 
engine 139 in the location center 142, the location engine 139 initiates a message to the mobile station 140 via a signal processing 
subsystem and the bcation center mobile switch center physical interface, the location applications programming interface 136 for 
the mobite switch center 112 and the wireless network infrastruaure. 

The addhbn of a controllable dau connection or path 49 can be easily performed by CDliA application-specific 
int^rated circuit (ASIC) roanufaaurers. In the case of one ASIC manufaaurer known to the authors, the Qualcomm ASIC chip 
mobile statwn modem, model number HSN 2300, provides both the control processor funaion 534 and the user digital baseband 
542 funaions or the same chip, thus the external pinout physical configuration wouU not have to change to accommodate the 
wireless location software controllable data conneaion or path 49 modification. 

If the mobile statkin 140 searcher receiver deteas 4 pibts with 4 multipatbs each, with each measurement consisting of 
a pilot index, finger tdentificatbn, muitipath signal strength, and muttipath arrival time, then about 460 bytes are needed per 
imasurement Assuming the searcter receiver performs one measurement every 10 mS, about I second is needed to compile and 
buffer each sample of 126 measurements per sample, or about 48 kitobytes. Using a typkal 9600 kbps CDMA dau channel between 
the mobile statktn 140 and a BS 122, and assuming a 50 percent overhead, the mobile statnn can complete the colleaion and 
transmission of a tocation measurement sample in less than ten seconds, which is within a reasonable period for satisfying a 
hiatnn request 

The implementation of the data services required to telemeter the necessary signal measurements may be performed in 
any of several embodiments. Id one embodiment the location signal measurements request-response application message set 
utilizes the air interface servkxs provkled by the spare bits and digital control words not currently in the air interface standards IS- 
95 ami ANSl-J-STD-006. Such bits and control words can be reserved for the purpose of requesting and providing the required 
ktcation signal measuremenu discussed herein. Using this embodiment the base station and mobile switch center must be modified 
to support the interworkii^ function required between the loation center and the mobile station. In a second embodiment the 
loQtion signal measurements request-response application message set is implemented using service optk>ns 4 and 12. which 
provides asynchronous dau transmission capability, as defined in TH4SD2ta Standard, Async and Fax Seahn, document number 
TIA/EIA/1S-DATA.4. Using this second embodiment, the mobile sution control processor provides, or wouW interface with a 
funaion emulatir^ mobile termination 0 or 2 services at the ft^ network reference point The L-API then provides, or would 
interface with a function emulating the physical interface connecting a data circuit-terminating equipment (DCE) to the PSTN at 
the W network reference point, in communication with the PSTN, which is also in communication with reference point Ai, which is 

2S 
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in communication with reference point U,^ which is in turn in communication with reference point . An advantage of this 
embodiment is that no ASIC or circuit board modifications are needed in the mobile station. 

The ANSI standards J-008 and IS*9S provide several means for the base station 122 to establish and to extend the 
search window size that the mobile station 140 should use in its scanning process, and to identify further pilots. For location 
S purposes, either existing standard parameten can be extended, or a location message request from the Base station can inform the 
searcher receiver of the mobile station to extend iu search range, as necessa7, to capture all relevant base station pilou and their 
multipath fingers, in order to complete the location measurement sample. 

The search performance criteria defined in ANSI IS-98, Recommended Minimum Performance Standards for Dual Mode, 
can be increased as appropriate to accommodate a larger set of potentially detectable base stations, including Location Base 
10 stations and Mobile Base statiooL Additionally the search window table size for various search window values must be increased to 
accommodate new pilot channel pn*offsen associated with Location Base Stations and Mobile Base sutions. 

Existing standard parameten include, for example using the In-traffic System Parameters Message, the values 
SRCH_WIN_A (for aaive and candidate set). SRCH JVIN N (for neighboring set), and SRCH SIN R (for remaining set) can be 
used to cause the searcher receiver to increase iu search area to detea and thus measure as many pilots as can be deieaed in the 
1 5 area. Extending the ran^ of T_ADD and T_DROP parameten can also be used to facilitate the mobile to retain data on additional 
pilots in the area. The extended neighbor list message is used to inform the mobile station of the necessary characteristics of 
neighboring pilot signals. For example if location base stations are used on a different frequency assignment, and/or utilize unique, 
non-public pilot PN sequence offset indices, for example, in using incremems other than 6A PN chips, then the extended neighbor 
list message an be used to instrua the mobile station to scan for those types of base stations, accordingly. 
20 There an be several combinations of delay spread signal strength measuremenu made available to the loation center, 

from the mobile station 140. In some ases the mobile station 140 may detect up to three to four pilot channels (representing 3-4 
base stations), or as few as one signal from one pilot channel. 

For each pilot channel detection case, multiple, up to three to four fingers, or multipath signals may be detected per 
pilot channel 

25 Note that multiple multipath signals, or multipte "Tingers** could exist from a less-strong BS pilot signal, or in any of 

several combinations, which can depend widely upon the mobile station's loation within the base station environment. 

By modifying the CDMA Base station, mobile nation and controller apabilities to provide the location center 142 with 
data that exceeds the 1:1 fingen to data receiver correspondence, additional information can be colleaed and processed in order to 
further improve the accuracy of the loation estimate. A control message from the loation center 142 and carried through the 
30 network, is sent to the control processor in the mobile station, requiring the searcher receiver in the mobile station o transmit to 
the loation center 142 via the network, all detectable delay spread fingers related to each detectable pilot channel. 

In one embodiment the control message is implemented in the CDMA receiver via a multiplexing technique, including 
appropriate manipulation of the hand-off parameters T_ADDs, T_DROPs, search window and the aaive, neighbor and remaining 
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pilot sets held within the mobile station' memory. 

Although the CDMA ANSI J-STD 008 requires reponing of the pilot channel arrival time in a time period of units of one 
chip size, or 613.802 nanoseconds* typical CDHA receivers conuin an internal Quantization interval of one eighth chip size. 

Within the mobile station, by modifying the time of arrival message response message to output the delay value in unit 
increments of one-eighth chip size, the precision of location accuracy can be increased from about 800 feet in radius to about 110 
feet. At the base station the arrival time measurement is forwarded in one-eighth units to the Location Center. A multiplier funaion 
applied to the received measurement at the base station rescaies the measurement for routine CDHA control and monitoring 
purposes, in order to be consistent with the CDMA standard. In order to distinguish among several mobile station models which 
report arrival time in eHher one-eighth chip units or one chip unit sizes, an encoding can be used in the mobile station's hardware 
or software identifications, telemetered to the base station and Location Center, in order to determine the arrival time 
measurement units. In one embodiment the analog receiver in the mobile station utilizes a clock signal which runs eight times 
faster than the clock originally disclosed in the Gilhousen patent, number 5 J 09390. In this manner the digital signal provided to 
the data receiven and the searcter receiver will include an improved resolution in ability to detea delay spread signals, which are 
directly used to improve wireless location. 

Although the CDMA air interface standard only requires a 1,000 nanosecond tolerance accuracy within respea to the 
base station, locatwn accuracy can be improved if manufaauring calibration preciskin's are held to within tighter tolerances, such 
as less than 2S0 nanoseconds. However in any given bcation request, as long as the base station to base sution tolerances are 
tuned properly to an anmunt less than 500 nanoseconds* then very good loation estimates can be performed due to the self 
canceling time effect geometries typically present in multi pitot channel deteaion found in urban and suburban areas. 

Increasing the typical number of data receivers in either the mobile statbn or base station provide added capabilities to 
lock and track more delay spread fingers and respective base station pitot channels. The resulting additional information, if 
available in a given radio coverage area 120 in Fig. I, can be used for enhanced kmm estimate accuracy due to confluence or 
voting methods which can be deployed at the LoQtion system 142. 

In certain cases wireless \oatm signals are received representing distributed antennas (or other base stations) across 
buikling floor boundaries being rece'nred from a specific floor on a multi-storied buiMing. As a specific example, consider signals are 
being received from both the 40th and the 41 th f k)or; the objeaive is to resoke the ambiguity of the situation. Fuzzy logic is used 
to resolve this ambiguity. The determinatran as to which floor the user of the mobile station is on is based on the strength of the 
signal, S, and the past reliability of the information associated with the two antennae, H The spaces of S and K are discretized using 
fuzzy sets. The nrength is defined as bemg: (1) VERY STRONG (VS), (2) STRONG (S), (3) WEAK (W), and (4) VERY WEAK (VW) as 
defined by membership funahns. The reliability of inforroatnn is defined as being: (I) VERY RELIABLE (VR), (2) RELIABLE (R), 
and (3) NOT RELIABLE (NR), again as defined by membership funcdons. A fuzzy relation or mapping is described which descretizes 
how confident it is that the signal is coming for a gnren floor, e.g., the 40th floor, using the foltowing notation: 
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VS 


S 


W 


vw 


VR 


1.0 


0.8S 


0.45 


02 


R 


0.85 


0.6 


M 


0.1 


NR 


0.6 


0.4 


03 


0.0 



The above relation matrix is read, for example, that when the signal information is RELIABLE and the strength is WEAK, 
then the confrdence that the signal is coming from the 40th floor is 0.4. A similiar fuzzy relation matrix is esublished for the 
distributed antenna on the 4l$t floor, and thus the result would be a confidence faaor associated with the mobile station being 
S located on either floor. A single solution, that is, whether the mobile station is on the 40th or 41st floor is determined using a 
composittonai rule of inference. The compositionat rule of inference is a function that prescribes a mechanbm for consolidating 
mambership function values into a single crisp function. This funaion can take a variety of forms including max-min composition, 
max-produa composhion. etc The compositional rule of inference can be implemented, for example, by a summing junaion which 
collects the results of each firing rule. The summing junaion's output is then provided to a centroidal def uzzier which provides the 
10 discretized output. 

Fig. 43 indicates the addition of a fuzzy logic module 41 which optionally discretizes the wireless location estimate 
output from the TOA/TDOA locaton estimator module 6. In the above case fuzzy logic rules related to the distributed antenna 
relation matrix would be fired or aaivated as a result of exmining the message header data structure that indicates that the 
location estimate was the result of a distributed amenna case around the 40th and 41st floor of a particular building within which 
IS such fuzzy relations exist or in any other localized case sherin such fuzzy relations have been predetermmed. Otherwise, in cases 
where no such fuzzy rules apply, the location estimate is passed to the recipient without further discretization. 

Note that the conTidence associated with the location of the mobile station can be considered a funaion of several 
variables, not just the two (S and R) described above. For insunce, it would not be unreasonable to segregate the reliability 
information by time signal delay as determined within this invention. The fuzzy relation is capable of handling a variety of such 
20 situations. Thus which floor the mobile station is on an be considered to be a funaion of numerous variables; the ultimate decision 
an be made based on a great deal of information. 

LOCATION CENTER - NETWORK ELEMENTS API DESCRIPTION 

A loation appliation programming interface 14 (Fig. I), or L-API, is required between the loation system's 42 signal 
processor 20 and the mobile switch center 12 network element type, in order to send and receive various comrol, signals and data 
2S messages for wireless location purposes. The l-API is implemented using a preferably high-apacity physial layer communications 
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interface, such as IEEE standard 802 J (10 base! Ethernet), although other physkai layer interfaces could be used, such as fiber 
optic ATM, frame relay, etc. Two forms of API implementation are possible, in the first case the signals control and data messages 
are realized using the mobile switch center 1 12 vendor's native operations messages inherent in the produa offering, without any 
special modifotions. In the second case the L-API includes a full suite of commands and messaging content specifically optimized 
for wireless location purposes, which may require some, although minor development on the part of the mobile switch center 
vendor. A minimum set of l-API message types include: 

A first message type, an autonomous notification message from the mobile switch center 1 12 to the location system 42, 
is required in the event a wireless enhanced 9-M call has been sent to the mobile switch center from an mobile station 140, 
including the mobile identificatbA number (MIN), along with various CNRS identification and mobile station deteaed aaive, 
candidate, neighbor and remaining pilot set information, pilot strength measurements message; 

A second message type, forward path request-response message, from loation system 41 to mobile switch center 1 12, is 
required to request a mobile station (MS) for signal measurements and hand*off information, with a response message back from 
the mobile switch center 1 12 to the location system 42, along with various CNRS identification; 

A third message type, Reverse path request-response message, from location system 42 to mobile switch center 1 12, to a 
6S for signal measuremenu received at the BS and hand-off information, for a given mobile station NIN, along with various CNRS 
identiftcation. It is preferable for the received signal strength measurements performed at the mobile station along the forward 
path, and at the base station along the reverse path, to be reported in a variable-length data stmaure as folbws: for each pilot 
channel offset, include the phase of the earliest arrhring usable multipath component pilot PN sequence relative to the zero offset 
pilot PN sequence of this pilot, termed pilot PN phase or pilot arrival, m units of one-eighth PN chip, instead of units of one PN chip 
as suted in the standards. Furthermore, in accordance with the standards, the pilot strength shall be included, measured based on 
at most k usable componenu, wtere k is the number of demodulating elements supported by the receiver system. In additbn the 
total number of each detectable multipath components shall be reported. In addition each multipath componem, for a given pilot 
shall be identified by both its delay component and signal strength, for inclusion in the signal measurements to the location system 
42. Regarding each individual multipath component, signal strength is expressed as is commonly known, by adding the ratios of 
received pilot- muhhpath componem energy per chip, E^, to total received spectral density (noise and signals), \, of at most that one 
mutipath component (ut^ k is equal to one). 

A fourth message type, an autonomous notification message from the mobile switch center 1 12 to the location system 
42 is required, in the event of an mobile station hand-off state change, along with various CMRS identification. 

In order to implement additional locatbn funabns such as wide area location, wherein location is determined across 
roaming boundaries, out-of-coverage area conditions or mobile station 140 turned off, and home base station applications, the L- 
APi must include access to and receive data from a data store comained in the home location register (HLR) network element type 
associated with the mobile switch center 112. 

A fifth message type is required which provides the tocation system 42 with the mobile station MIN, hand-off, along 
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with various CNRS identiriation information (e.g^ old and new state changes, old and new BS identifications, and hand offs to 
another CMRS), roaming location and status changes. A typical communications protocol such as Signaling System number 7, 
ranoing on a V35 communications channel coutd be used for implementation, but numerous other protocols (e.g., TCIP/IP, ROSE, 
CMISE, etc.) could be used to implement this capability. If the home location register is local to the mobile switch center 1 12 then 

S the LC - mobile switch center communications link could be used, otherwise a separate communications link is used between the 
loation system 42 and the home location register. 

A sbtth message type, an autonomous notification message type issued from the location system 42 to the home 
tocation register, is required for those location applications they rely on an alen from the home location register when ever a 
particular mobile station state change occurs, ak)ng with various CMRS identification. Consider the case wherein an mobile station 

10 140 whose location is to be tracked constantly. In such cases a histo^ of loations is maintained in the location system 42. Should 
the mobile station 140 user turn off the power, or exit from the coverage area, then by using previous location values a vector and 
approximate velocity can be determined. This sixth message type provides a notification message from the home location register to 
the location system 42 whenever a previously klemified mobile station HIN has a state change. Examples of a state changes include 
ases where the base statbn 122 discovers the mobile station 140 has traveled to another base station, or that the current primary 

15 base station 122 can no longer communiate with the mobile statran 140 (i.e.. no power), or that a new registration has occurred. 
In general this message type should support the notificatton from the home location register to the location system 42 of all 
messaging and data associated with the nine types of registration, in the case of CDMA. Specifically these include power-up, power- 
down, timer-based, distance-based, zone-based, parameter-change, ordered, implicit and traffic channel registration. The location 
system 42 should also be informed of the registratnn enablement status of each type of registration, which can be provided to the 

20 location system 42 via a redirection of the systems parameters message. It should also be possible for the locat'ton system 42 to 
initiate an ordered registration through an order message, from the location system 42 to the mobile switch center 1 12. The mobile 
switch center 112 then shall route the message to the appropriate base station, and then to the mobile stauon. The location system 
42 should also be able to receive the results of the message. 

In order to implement additional location f unaions such as provkiing users with location information and routing 

2S instructions to certain loatnns via the wireless short message text pag'mg servke, an L-API is required between the location system 
42 and the network element type used to implement the short message service. Such network elements may be termed an intelligent 
peripheral or a service node. A number of existing paging interfaces have been proposed in standards bodies, and one or more 
modifiatmns an be made to accomtnodate L-API content In any case, the following L-API addition is required: a seventh message 
type which allows the tocation system 42 to send a text message containing location information or instruaions to a particular 

30 mobile station MIN, and a related message to verify response. Optionally another, ninth message type, an autonomous message 
may be provided to alert the locatk>n system 42 under conditions wherein a state change occurs on a previously pending text 
message. This last message type provides improved quality feedback to the initiating party regarding the acceptance situation of 
the attempted-to-send page. 
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UTILIZING MULTIPLE CMRS INFRASTRUaURE IN A SHARED COVERAGE AREA 

As a consequence in practical deployment situations that base stations are not placed in a uniform manner in a 
geographical area» and the fact that variable and fixed clutter introduce a variety of signal measurements which can result in the 
5 provision of an ambiguous location estimation, a novel aspen of this patent includes the utilization of the inherent ability of the 
wireless protocol and receiver design to request and receive signal measurements along the forward and reverse air interface 
communkat'nns path with a given mobile station and other commercial mobile radio service providers, in cases where multiple 
service providers share a common coverage area. Thus in a coverage area shared by two service providers A and B, utilization of 
received signal measurements from both service provider A and service provider B can be used by the location center as unique, 

1 0 orthogonal information to both resohre ambiguous loation estimates and to further improve the location estimate accuracy. 

The CDMA air interface, for example, provides a soft hand-off capability for the mobile station to hand-off a voice 
communication channel to another base station, and even to another GNRS provider, termed a hard hand-off. 

Referring to F^. 3, assume three sectored base stations 122a, 122b, and 122c, in communication with mobile switch 
center-A 1 12a, are owned and operated by CMRS provider A. Further, assume three sectored base suiions 1 22d and 122e, in 

IS communication with mobile switch center-B 1 12b, are owned and operated by CMRS provider fi, and that the coverage area with 
CHRS-A and CMRS-B substantially overlap, in order to locate a mobile station 140 whose subscriber normally does business with 
CMRS provider A, assume that the receWer of mobile station MO can detea signals from base stations 122a, 122b, and 122c, as well 
as from base stations 122d and i22e, although normal mode use would preclude such measurements from being initiated. Assume 
further that the resulting location estimate 131, generated from the location center 120 contains either an ambiguous location 

20 estimate value pair, or otherwise cannot render a location estimate with the desired range of accuracy. . 

From an inspection of the overall base statmn geometry of base stations owned by CMRS A and CMRS B it is evident that 
a urong possibility exists that either 1.) the receivers in mobile station 140 have the possibility to detea the pilot channels 
associated with base stations I22d and 122e; 2.) the receiven in base stations I22d and I22e have the possibility to detea the 
transmitter signal from mobile station 140. The location system 142 conuins a data store of both CMRS provider's base station 

2S geometeries and is in communication with each mobile switch center - A 1 12a and mobile switch center - 6 1 12b. An application in 
the location system 142 sends a control message to the mobile station 140, instruaing the mobile station to lune its searcher 
receiver to listen for and report back signal measurement data regarding the pilot channel information associated with base 
stations I22d and 122e, in addition to a request to report of pilot signals relative to base stations 122a, 122b, and I22c. Similarly 
the application in the location system 142 sends messages to each of base stations I22d and 122e, with instruaions to take signal 

30 measurements and report back the resulting information regarding the mobile stations transmmer 140. Since the signaling 

information from base stations I22d and I22e are based on a substantially different tocatbn geometry, the resultant information is 
orthogonal and thus can be used by the k^ation center to provide enhanced location estimates. 

31 



SUBSTITUTE SHEET (RULE 26) 



wo 98/10538 



PCT/US97/15933 



If appropriate, a variation of the above process includes a location center initiated forced hard hand-off of the mobile 
station from a primary base station, e^.. 122b associated with CNRS-A, to a new primary base station associated with CMRS-B, e.g., 
I22d. A forced hand-off will further provide improvements in reducing systemic timing errors which may be inherent among base 
stations owned by different CHRS. After the appropriate signal measurements have been reported the location system 142 can 

S revert the hand-off back to the original CMRS. Other location system components shown in Fig. 3 include a controller 14 location 
applications programming interface 136 (L-API-NSC) for communications interface with multiple CHRS mobile switching centers, 
via physical interfaces 176a and 176b. 

In order to provide the most economically efficient and accurate wireless loation service capabilities among multiple 
CHRS providers in a shared coverage area, a common location applications programming interface (L-APl) is highly desirable. A 

10 common interface also supporu the natural competitive behaviors among wireless consumers and CMRS by providing flexible 

relationships among consumers who may want to switch service providers, yet reuin consistent wireless location services for public 
safety. This approach minimizes the UAPl design and depbyment costs among inf rastruaure vendors and location service 
providers in a shared coverage area. Based on a L-API between a wireless location center and the mobile switch centen of multiple 
CHRS, a novel aspect of this invention further includes a method and process that provides account management clearing house and 

1 S revenue settlement capability with appropriate security management controls. This capability is implemented as wireless loatbn 
control, accounting and security mediation agent funaions to compensate CHRS providers for providing various location-specific 
network services as described herein. 

As wireless location requests are sent to the location center for a given CMRS, operated by a wireless location service 
provider (WLSP), this agent 1.) assesses the appropriateness of solkiting additional signal and control measurements from another 

20 CHRT base station in the same coverage area, in order to improve the quality of the tocation estimate. 2.) Accesses, requeus and 
receives signal and control information with another CHRS base station infrastrunure, 3.) provides as appropriate a record of 
compensation entitlement between or among multiple CRHS and WLSPs. and 4.) security management controls thai protea the 
privacy needs of wireless customen and the unauthorized sharing of information between or among CHRS. Security controls atsc 
include audit trails and controls regarding customer access of their location subscriber profile and the administration of network 

25 security processes and related base station parameters and inventory. 

Referring to Fig. 5, Loation Center-base station access, multiple CHRS, an alternative embodiment is provided to 
extract the wireless bation signal measurement data from each base station associated with each of multiple CHRS. Given base 
station 122i and I22j are operated by CHRS-A and base station I22kand 122m are operated by CHRS-B, a communication circuit 
provides connectivity with the kication application programming interlace - base station (L-API-BS) 109. The L-API-BS 109 is in 

30 communication with controller 14 in the location center 1 42. The communications circuit can be any of several conventional 

transport facilities, such as a private fine circuit, a DS-1 or T-l carrier circuit, frame relay circuit, microwave circuit, or other data 
communications circuit. 

The advantage of this embodiment is that no modifications are required by the infrastructure vendor in terms of the 
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embedded operations circuit, and related f unaions and systems which otherwise would be needed to telemeter wireless location 
signal measurement data from the base station to the location center 142. The termination equipment (not shown) in 
communiation with the transport facilities, within each base station typically includes a small computer with an in-circuit 
conneaion, such as an ASIC clip-on device, with conneaions to the control processor circuitry with the base station in the receiver 
5 seaion. The small computer provides a conversion of the signals provided on the in-circuit conneaion to the ASIC chip, for 
serialization and transmission to the location center via the transport facilities. 

HONE BASE STATION DESCRIPTION 

The Home Base station (H6S) concept in the PCS wireless network environment allows a user*s mobile station to be also 
10 used as a low cost cordless phone, whenever the mobile station is physically near (generally within 700-1,000 feet) of a Home Base 
station Device (HBSD). This enables the user to avoid the typically higher cost air time charges associated with traditional wireless 
service. 

The HBSD is similar to ordinary cordless phone transceiver devices in current use today, but is modified to function with 
a PCS wireless mobile station. Although the HBSD has been typiatly used at a residential consumer's home, the HBSD could also be 
IS used in business settings and other environments. 

When a mobile station (HS) is near the HBSD as shown in Fig. 17, and the HBSD deteas the presence of a mobile 
station over the Cordtess phone air interface, the HBSD signals the Home Location Register (HLR) software in the Service Control 
Point in the AIN network associated with the mobile station and mobile station*s home mobile switch center. The home location 
register redireas mobile station terminating alls from the network away form the mobile station* mobile identification number in 
20 the mobile switch center, and to the AIM/SSP wireline class Y switch which conneas the wireline number associated with the HBSD. 
Similarly, the HBSD. upon deteaing a mobile station call origination attempt, redireas the mobile station signal from a PCS 
network fixed base station, to the control of the HBSD. The HBSD redirects the mobile station originating call through the wireline 
network, similar to any other wireline network call. 

A reverse scenario occurs whenever the mobile station and HBSD lose communication: the mobile station registers in a 
2S wireless PG network faed base statnn, ausing redireaion of calls to the wireless network. The cordless phone air interface may 
be of a vendor proprietary design, or it may be a similar design as the CDHA air interface. 

in order to perform a kxation estimate in the HBS concept, a conneaion is used between the Location Center (LC) and 
the home location register/HBS application in the SCP. In addition, a new process, termed a Location Notification Process (LKP) 
within the home bcation register/SCP is used to send a message to the LC, autonomously whenever a state change occurs in the 
30 mobile station' (either via a specific list of mobile klentirication numbers or all mobile identification numbers) registration: 
registering either to a fixed Base station in the Wireless PCS network or to a HBSD. 

Alternatively the process may respond to an on-demand message from the LC to the LNP within the home location 
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register/HBS application. In either case a response message from the LNP to the LC provides the information regarding whether or 
not a mobile station is within range of its, or a designated HBSD. In either case the response message contains a message header 
information which provides the signal processing subsystem 20 (equivalentix this may be known by signal filtering subsystem) 
with the ability to determine and distribute the information to the HBS First Order Location Estimate Model. 

LOCATION USING DISTRIBUTED ANTCNNAS DESCRIPTION 

CDMA distributed antennas are useful particularly in system configurations involving microceils, and potentiatiy indoor 
environments, such as CDMA PBX (private branch exchange) systems in business offices, and in wireless local loop applications. 
From a mobile station location perspective, the distributed antenna configuration can provide significant improvements in location 
error, as compared with an indoor mobile station user with a wireless connection to an outdoor, macroceli Base station. Wireless 
tocation can be achieved provided certain methods and procedures (M&Ps) are followed during the installation process. Data 
related to these N&Ps is then used by various location processes discussed ebewhere in this invention. 

First, a general description of CDMA distributed antennas is presented, followed by the N&Ps necessa7 lo support 
wireless locatbn. 

in the CDMA distributed antenna concept, a set of simple antennas, placed apart in a given area, similarly to any other 
celJ placement arrangement for coverage objeaives, are fed by a common radio signal. Antennas are usually placed such that their 
coverage patterns are substantially or completely overlapped in area of coverage. From a wireless location perspeaive, completely 
overlapping coverage is preferred (this approadi also nnproves perceived signal quality by the end users). 

The importance of understanding and character'uing the aggregate system delay elements is shown in Fig. 6: Distributed 
Antenna Delay Charaaerization. For any given Pilot Channel offset T*. additional delay is introduced by the microwave 
propagation channel (Point A) and any internal repeater/amplifier equipment (Point B). Each of four delay elements ti through t4 
introduce further delay. A mobile station deteaing all four DA antennas* delayed signals would determine various seis of 
cumulative system propagation delays. Since each delay is essentially fixed in a location, such inlormation can be used to determine 
the mobile station locatbn within the building. Fig. 7 illustrates the effeaive system timing among the delay elements 324, relative 
to the GPA system time 336, along each point in the diagram shown in Fig. 6. 

Fig. 9: One Exemplary DA Conflguration, illustrates a typical configuration where the CDMA base station antenna is also 
directed conneaed to three delay elements and antenna radiators. 

The CDMA Base station transmitter common output signal is fed through a distribution coaxial cable system, optical 
fibers or other means, to a string of two or more antennas. Each antenna is conneaed to the distribution cable via a transmission 
line tap or delay element, which may or may not provide further broadband gain. The transmission system normally consists of two 
media channels, one for transmit and one for receive signals. Fig. 10 illustrates an Alternative DA Configuration, using multi-point 
microwave antennas connected to individual delay elements and their respeaive radiating antennas. 
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Fig. 1 1: Serving Dense Hulti-level buildings via Virtual Ptioa, illustrates a t/pical application where a multi-level 
building is served by two base stations with pilot offsets and "j". Pilot offset "I" serves floor X and pilot offset serves floor 
Y. As shown, a microwave link, either aaive or passive, relays the base station signals between the distributed antennas within the 
building to the base stations. 

5 The main concept is to irrtroduce purposeful delay and multipath signals with sufficient delay spread for signal 

discrimination. Each antenna radiates a signal which is substantially delayed with respea to any other antenna in the area. If two 
or more paths are available for the mobile station receivers with greater than one eighth microsecond differential path delay (or 
whatever resolution is available in the CDMA mobile station receiven)» then two or more PN receivers in the same mobile sution 
can be employed to separately receive and combine these signals and thus achieve processing gains through path diversity. 

10 Antennas may be omni-direaional or directional. 

Delay elements may be simple delay lines such as lengths of coaxial cabling, or other aaive or passive delay elements, 
such that the combination of componenu provides the needed delay. The transmission line between the CDMA Base station/PBX and 
the distributed antennas may be via a pair of dedicated, beam-focused high gain antennas, and/or a repeater system. Provided 
sufficient delay exists between the multipath signals from separate distributed antennas exists, each Data Receiver within the 

15 mobile sution tracks the tinring of the received signal it is receiving. This is accomplished by the technique of correlating the 
received signal by a slightly earittr reference PN and correlating the received signal with a slightly late local reference PN. Further 
distributed antenna details can be seen from Gilhousen, et al, patent number 5,280,472, assigned to Quakomm, Inc. 

The total measured delay of both forward and reverse frnk signals between the BS and the mobile station are thus 
determined naturally by the CDMA radio receiver designs as a part of the multipath tracking process, and can be made available to 

20 a locatbn entity for performing bcatnn estimates of the mobile station. 

However, the measurements of delay between a particular distributed antenna and the mobile station will include the 
aggregate delay components of several mechanisms, beyond the BS pilot PN offset delay. In the ase of distributed amenna 
configurations, the simple TOA or TDOA model which is based solely of the speed of light, must now be adjusted to account for the 
purposefully introduced delay. 

25 The mobile statnn measures the arrival time T> for each pilot /reported to the BS. The pilot arrival time is the time of 

occurrence, as measured at the mobile station antenna connection, of the earliest arr'nring usable multipath of the pilot. The arrival 
time is measured relative to the mobile station' time reference in units of PN chips. The mobile station computes the reported pilot 
PN phase fi as: 

fi = (Ti + MxPILOT_PN)mod2^ 
30 where PILOT PN is the PN sequence offset of the pilot 

Reference fig. 6, which illustrates a typical distributed amenna configuration consisting of a repeater/amplifier and 
four distributed amennas. The total system delay, T; b: 

h = Uei + To 4- Tr + T, -f T, + T3 -h T4 
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Ourinf the installation phase of the high gain antenna (if required), repeater (if required) and the distributed 
antennas, if the system delay is measured at each distributed antenna and the values stored in a location database, including each 
antenna identification, and exaa physical location (in three dimensions), then during a location request, all fixed delays will be 
known, thus the TP value can be determined by subtracting the fixed, known delay values from Ti, the measured time of arrival. 
S The TP value can now be used to determine a TOA and or a TDOA value in a manner similar to the non-distributed antenna case, 
thus location can be determined based on these TOA/TDOA ranging values. 

The required installation methods and procedures required to suppon wireless location are illustrated in Fig. 6: 
Methods and Procedures for DA Installation. By following these methods, the Location Center (LC) will contain a database 
populated with the necessary data values to perform accurate location estimates within the building containing the distributed 

10 antennas. Fig. DA-10: Exemplar DA Location Database, illustrates typically data element types and values required in the DA 
location estimate model database. Fig. DA-I I illustrates how a simple TOA location estimate model can be used to determine 
wireless location in a DA environment Rased on the known geomet^ and coverage areas of each DA eel), and the percentage of 
maximum radius, determined by the above classification, it is possible to construa radius-radius circles of the DA cells. The 
interseaion of the three circles (in this case) provides the location estimate. 

15 In order for the TOA and TDOA bcation calculations to be determined, it is a necessary condition that durmg 

distributed antenna installation, the minimum values of the Delay Elements be set to each exceed the maximum praaical (Le., 
within the coverage area) TP vahies be at least 1/2 of a PN chip duratnn (about 500 nanoseconds), to easily allow for the CDMA 
Data Receivers to be able to correlate between the delay element values and the TP delay values. Fig. 12: DA Delay Spread Ranges, 
illustrates typical maximum ranging variable delay values (e.g., up to 1,960 feet) if 500 nanosecond guard zones (t) are used. If 

20 larger ranging values are required^ then guard zone delays must be increased proportbnally. 

Fig. 13: DA Cell Layout and Geometry, illustrates, for DA omnicell sizes with a radius of about 2,000 feet and guard 
zones of 500 nanoseconds, that the minimum required cumulative delay values for the delay elemenu are: ^ = 2.46 
microseconds, = 4.92 mS, and t4 = 738 mS. respectWely. 

It should also be noted that a maximum upper bound exists for the maximum amount of cumulatWe system 

25 propagation delay which can be tolerated by the CDHA mobile station. The total delay cannot exceed an amount that would 

interfere with the next pilot PN offset, or substantially delay the scanning time of the search receiver in the mobile station. In any 
case, 30 to 40 microseconds of total delay is acceptable, and wouU allow for a relathrety large number of distributed antenna 
components to be included, thus no unusual impacts are required of the system to accommodate locatnn methods. 

By purposefully introducing a relatively large amount of delay in the distributed antenna delay elements, relative to the 

30 maximum permissible TP deby values, it is possible to utilize the large Delay Element values to uniquely klentify the distributed 
antenna ID, and thus via the distributed antenna database, to determine the antennas* exaa location. Knowing the antenna's 
location and TP value (last stage of propagation delay), TOA and TDOA ranging can be achieved, and thus mobile stat'ran loation 
wthin a distributed antenna configuratbn, can be determined. 
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Fig. 14: Aaual Measurements and Classification, illustrates how CDMA delay spread measurements are used in a OA 
configuration to form a relationship with the mobile station location with respect to the DA locations. Although the CDMA air 
interface standard only requires the signal strength and time of arrival of the first useable delay spread signal to be reported from 
the mobile station to the BS, assume here that the mobile station has the capability to provide the BS, and consequently the LC. 
5 with a list of all peak values of CDNA fingers. 

Assume that the mobile station detects and telemeters three CDMA finger RF measurements, as shown in the table below, 
New Message Type Data Struaure Content 



Sienal Strength 


Delay Time of Arrival 


-77dBm 


1.68 microseconds 




3.98 


-95 


9.16 



Table: New Message Type Data Struaure Content. 



Note that the measurements may be averaged over a sample space of 128 individual measurements. Referring now back 
10 to Fig. 1 4. it can be seen that the fint finger is associated with the DA celM , range 0 to 1 .96 microseconds, and DA cell-2, range 
2.46 microseconds to 4.42 u5, and DA cell-4, range 738 to 934 uS. Since the DA cell antennas are fixed, with known locations, 
correlation's can be derived and established to relate aaua! measurements with locations. Any one of several location estimate 
modules may be used, as shown in Fig. DA-I2: Location Estimate using the radius-radius method, or multiple invocations of 
different modules may alternatively be used to form a loation estimate of the mobile station within the DA environment. 
15 It is now possible to classify the above aauat measurements as propagation delayed signals for the DA cells 1 , 2. and 4, 

since each DA celt delay range is know, and sufficient guard zones exist between delay spread ranges to unambiguously classify the 
measurements, and thus to determine mobile station location. The folk»wing table illustrates a typical database containing the 
classification columns for each DA cell and their corresponding loation in an x,y plane. 



DA Cell ID 


LocatMn (X, Y) in 


DA Cell Radius 


Low Range ( 
microseconds) 


Hieh Ranee (In 


feet) 




microseconds) 


1 


(0.0) 


1.96 


0 


1.96 


2 


(-20.3000) 


L96 


2.46 


4.42 


3 


(4000.2800) 


1.96 


4.92 


6.88 


4 


(1600,2800) 


1.96 


738 


934 



20 TaUe: New Message Type Data Structure Content 

Translating the actual delay measurements into a percentage of the maximum radius of each cell (*i.e., cell 1 radius 
actual is 88 %, cell 2 radius actual is 78 and cell radius 4 actual is 9196) provides wireless location using familiar radius-radius 
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cakubtioas. 

Dependir^ upon the combinations of embodiments, the Location Center and Gateway may contain from one to three 
imerfaces into the digital PCS network, shown as interfaces X, Y, and Z. in Fig. 24, Location and aiA/rR4S Network Reference 
flodeL Network interface reference points Um, A, Ai, B, C. D and H are part of the Cellular Telecommunications Indust7 of America 

S (CTIA)/TechnicaI Reference 45 standards, and are not discussed further 

Network interface reference point X provides a direa connection to the mobile switch center, used for transferring Rf 
measurement signals from the mobile station and 6S to the LC and for transferring location control between the LS and mobile 
station, and between the LC and BS. This interface can be implemented via any number of data communications circuit 
configurations and protocols in current use, such as a T-carrier data circuit, with DSU/CSUs at each end, using an intranet/internet 

10 protocol suite, such as TCP/IP, RPC messaging, or other middleware solutions, such as Pipes, IBM MQ series, world wide web 

protocols, such as JAVA/VRML scripts, hypertext markup language (HTML) links, and may also include various firewall schemes and 
data encryption mechanisms, etc, in order to communiate asynchronous messaging among the endpoints, and in particular, in 
reference to the final distribution of the bcation information to the desired end user. 

Network interface reference point Y is used in the embodiment wherein a public switched telephone network interface is 

15 required or desired. This interface is a straightforward method to support location applications wherein, for example, a mobile 
station user dials a telephone number in order to initiate a tocatbn request, and could also be used to telemeter RF measurement 
and location control messages between the LC and the mobile station/BS. Alternatively a timer-initiated process internal to the LC 
may be used to start a ioation request, or via any number of events external to the network. Point Y also has the advantage of not 
requiriif a direa connection to a commercial radio mobile service providers* network elements, thus affording a convenient 

20 . interface for use by third party bcatbn service providers unrebted to the commercol radb mobile service provider. 

NATIONAL SCALE WIRELESS LOCATION 

By utilizing specific data items used in the Home Location Register in the Advanced Intelligent Network, it is possible to 
determine the mobile statk)n bcation on a national sale, i.e., Ioation within the context of a state, and in which city. 

Network interface reference point 2 is used in the embodiment wherein a gross Ioation must be determined. A gross 
25 batmn is defined as an area associated with a particular mobile switch center coverage area, hobiie switch center coverage areas 
are typkally bounded by a large metropoliun area, such as a city. The Home Loation Register (HLR) conuins gross location 
information. The Z interface alkiws the LC to query the home hxation register to determine if the user is in their "home area, or 
whether the user is roaming to another mobile switch center coverage area, such as another city. IS4I Cellular Radio 
Tetecommunkat'ions intersystem operations communications protocols provide mechanisms that allow a user to roam into 
30 authorized areas outside of their ''home'* area. 

If the user is roaming in another area, then the LC an use that information to initiate loarion control messages toward 
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the CDHA network currently hosting the mobile sution user. Fig. 25 illustrates how a user based in Los Angeles, CA. for example, 
may roam to a CDHA system New York City, and be ''located'' within that metropolitan area, through a data communications 
network and a national Location Center Clearinghouse system. 

5 SIGNAL PROCESSOR SUBSYSTEM 

The signal processing subsystem receives control messages and signal measurements and transmits appropriate control 
messages to the wireless network via the kication applkatnns programming interface referenced earlier, for wireless location 
purposes. The signal processing subsystem additionally provkles varkius signal idintif ication, conditk>ning and pre-processing 
funaions, including buffering, signal type classincation, signal filtering, message control and routing functions to the location 
10 estimate modules. 

There can be several combinatrons of Delay Spread/Signal Strength sets of measurements made available to the signal 
processing subsystem 20 within the Location Center/System 42, shown in Fig. 3. In some cases the mobile station 140 may be able 
to detea up to three or four Pilot Channels representing three to four Base Stations, or as few as one Pilot Channel, depending upon 
the environment S'unilarly, possibly more than one BS 122 can detea a mobile station 140 transmitter signal, as evidenced by the 
1 5 provision of cell diversity or soft land-off in the CDMA standards, and the faa that multiple CMRS' base station equipment 

commonly will overlap coverage areas. For each mobile station 140 or BS 122 transmitted signal deteaed by a receiver group at a 
station, multiple delayed signals, or "fingers** may be deteaed and tracked resulting from multipath radio propagation conditions, 
from a given transmitter. 

in typical spread spcarum diversity COMA receiver design, the ''first** finger represents the most direa, or least delayed 
20 multipath signaL Second or possibly third or fourth fmgers may also be deteaed and tracked, assuming the mobile station contains 
a sufficient number of data receivers. AKhough traditional TOA and TDOA methods would discard subsequent fingers related to the 
same transmitted finger, collection and use of these additional values can prove useful to reduce location ambiguity, and are thus 
colteaed by the Signal Processing subsystem in the Location Center 142. 

for each pilot channel deteaion case, multiple fingen (up to three or four) may be deteaed and thus reported to the 
25 Location system, as shown in Fig. 22 and 23, for dense urban and rural settings, respeaively. From the mobile receiver's 

penpeaive, a number of combinations of measurements could be made available to the Location Center. Table SP- 1 illustrates the 
available comUnations (or three and four receiver cases, respeaively. 



No. of 


No.ofBSs 


No. of 


No. of 


No. of 


No. of 


No. of 


Receivers 


detected 


Fingers 


Fingers, BS 1- 


Fingers, BS 


Fingers, BS 


Fingers, 4-S 






Detected 


S (first 


2-S (second 


3-S (third 


(fourth 








strongest) 


strongest) 


strongest) 


Strongest 


3 


1 


1 


1 


0 


0 


0 


3 


1 


2 


2 


0 


0 


0 
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No. of 
Receivers 


No. of BSs 
detected 


No. of 
Fingers 

IlilllM lull 


No. of 

Fingers, BS 1- 

S /fire* 

Strongest) 


No. of 
Fingers^ BS 

Strongest) 


No. of 
Fingers, BS 

Strongest) 


No. of 
Fingers, 4-S 

/fourth 

Strongest 


3 


1 




3 


0 


0 


0 


3 


2 




1 


1 


0 


0 


3 


2 




2 


1 


0 


0 


3 


2 






2 


0 


0 


3 


3 






1 


1 


0 


4 


4 






1 


1 


1 


4 


3 






2 


1 


0 


4 


3 






2 


( 


0 


4 


3 




2 


t 


1 


0 


4 


2 




3 


1 


0 


0 


4 


2 




2 


2 


0 


0 


4 


2 




1 


3 


0 


0 


4 


1 




4 


0 


0 


0 



Table SP-I: Nominal CDMA Location Measurement Combinations 



The above Table SP-I scenario assumes that the mobile station design and data collection struaure only permits a 1:1 
correspondence to exist between the number of base stations detected and the number of data receiven reporting muitipath CDMA 
S fingers. 

Table SP-I illustrates the potential combinations of detected CDMA signals representing muitipath fingers and total 
number of detectable base station pilot signals in a given location within the radio coverage area 120. Due to the disperse and 
near-random nature of CDNA radio signals and propagation characteristics, traditional TOA/TDOA location methods have failed in 
the pastf because the number of signals received in different locations area different In a particularly small urban area, say less 

10 than SCO square feet, the number of RF signals and there muitipath componenu may va^ by over 1 00 percem. 

The following diagrams illustrate a certain case from a location measurement perspeaive, of signals received for a three 
-data receiver and a four-dau receiver configuration, in a nominal three sector honeycomb base station configuration. In Fig. 18, a 
mobile station at location ''A" deteas base stations lb, 5c, and 4a. However although a triad of signals are received, if varying 
muitipath signals are received from one or more base stations, then ambiguity can still result. Fig. 19 illustrates a mobile station 

15 ioated at position **A**, detecting base stations lb, Sc, 4a, and 2c Although additional information is made available in this second 
case, traditional hyperbolic combinations taken three at a time, yield multiple location estimates. In certain cases the limit of the 
back-side of a "far-away**seaored antenna can be used to determine the Fimit of RF coverage in another base station seaor area. 
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Fig. 20 shows that nomtally a delay spread in seaor I b would imply a range of a 120 degree solid angle. However by using the 
known faa that base station seaor 2a conuins a coverage limit, such negative logic can be used to further restria the apparant 
coverage area in seaor lb» from 120 degrees to approximately 90 degrees as shown in the illustration, in order to locate the mobile 
station B. Such information regarding seaor 2a can be determined by collecting the remaining set information from mobile station 
5 B. 

Now consider more praaical, less ideal cases. Due to the large capiul outlay costs associated with providing three or 
more overlapping base station coverage signals in every possible location, most praaical digital PCS deployments result in fewer 
than three base station pilot channels being reportable in the majority of location areas, thus resulting in a larger, more amorphous 
location estimate. Fig. 20 and 21 illustrate a typical relative error space wherein a mobile station detects only two base station pilot 
10 channels, and only one pilot ciiannel, respeaively. This consequence requires a family of location estimate loaiion modules, each 
firing whenever suitable data has been presented to a model, thus providing a location estimate to a backend subsystem which 
resolves ambiguities. 

Base Station Cell site planning tools which utilize antenna gain radiation patterns, environmental cluner, such as 
IS buiklings, dense forests, terrain heights, etc., can provide reasonable training data to bootstrap the initial operation of the LC 

An example of the types of data typically colteded during field tests/runs is shown in the following database table $P-2 

behmr: 



Column 
Position 


Mobile Data Test Set: Data Type Logged 


1 


CDMA Time (absolute, from GPS) 


2 


Vehide Speed (in mph) 


3 


Vehicle Latitude (in deg. North) 


4 


Vehicle Longitude (in deg. East) 


5 


GPS Source (binary, e.g.» GPS or Dead Reckoning) 


6 


GPS Data available indicator (binar/ states) 


7 


First BS-Mobile Received Power (in dBm, 1 second averages) 


8 


Mobile transmit Gain Adjust (in dBm, 1 second average) 


9 


First fiS Mobile Rx Pilot ijio (dB, 1 second average) 


10 


First BS Mobile received Frame Counts (integers per measurement period) 


II 


Mobile Finger's Average Time Separation (in nanoAnicroseconds) 


12 


Mobile Fingers* Maximum Fime Separation (in nano/microseconds) 


13 


Md>ile Fingers* Number of Pilots locked (per 1 second average) 
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Column 


Mobile Data Test Set: Data Type Logged 


Position 




14 


Mobile finger Lock Counts 


IS 


Fint BS Received Frame Counts 


16 


First BS Eb/No set Point (in dB, 1 second average) 


17 


First BS cell Rx Eb/No per antenna (in dB. 1 second average) 


18 


Hand-o(f State (relative to the First, or connected-to BS) 


19 


First BS Traffic Channel Gain 


20 


First BS Power Control Subchannel Gain 


21 


First BS Reverse Link full Franne Error Rate, over 500 frames 


22 


Forward Link Cull Frame Error Rate, over 500 frames 


23 


First BS Pilot Channel Delay Spread (in nanoseconds) 


24 


Second BS^ked Pilot Delay Spread (in nanoseconds) 


25 


Second BS-Ranked Pilot Relative Signal Strength (in dB) 


26 


Third BS-Ranked Pilot Delay Spread 


27 


Third BS-Ranked Pilot Relative Signal Strength (in dB) 


28 


Mobile Antenna Identification (in the case of a multi-sectored antenna) 


29 


Vehicle compass orientation (bearing or heading) 


10 


Mobile Station Power Qass (an integer. 0-7, indicating max. power capabilities ol the mobile station 
transmitter) 



Table SP-2: Typical CDMA Field Test Measurements 

Although the forward link mobile statwn's received relative signal strength (RRSSgs) of deteaed nearby base station 
5 transmitter signals can be used direaly by the location estimate modules, the base station's reverse link received relative signal 
strength (RRSS^s) of the detected mobile stat'wn transmitter signal must be modified prior to location estimate model use, since the 
mobile nation transmitter power level changes nearly continuously, and would thus render relative signal strength useless for 
location purposes. 

One adjustment variable and one factor value are required by the signal processing subsystem: L) instanuneous 
to relative power level in dBm (IRPL) of the mobile station transmitter, and 2.) the mobile sution Power Class. By adding the IRPL to 
the RRSSffi, a synthetic relative signal strength (SRSSms) of the mobile station 140 signal detected at the BS 122 is derived, which 
can be used by location estimate model analysis, as shown bek>w: 
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SR$S„5 a corrected ind'otion of the effeaive path loss in the reverse direaion (mobile station to BS), is now comparable 
with RRSSbs and can be used to provide a correlation with either distance or shadow fading because it now accounts for the change 
of the mobile station transmitter's power level. The two signals RRSSgj and SRSS„s can now be processed in a variety of ways to 
achieve a more robust correlation with distance or shadow fading. 

Although Rayleigh fading appean as a generally random noise generator, essentially destroying the correlation value of 
either RRSSgs or SRSS„s measurements with distance imiividually. several mathematical operations or signal processing f unaions 
can be performed on each measurement to derive a more robust relative signal strength value, overcoming the adverse Rayleigh 
fading effeas. Examples include averaging, taking the strongest value and weighting the strongest value with a greater coefficient 
than the weaker value, then averaging the results. This signal processing technique takes advantage of the fact that although a 
Rayleigh fade may often exist in either the forward or reverse path, it is much less probable that a Rayleigh fade also exists in the 
reverse or forward path, respeaively. A shadow fade however, similiarly affects the signal strength in both paths. 

At this point a CDHA radio signal direttion-independent "net relative signal strength measurement" is derived which is 
used to establish a correlaion with either distance or shadow fading, or both. Although the ambiguity of either shadow fading or 
distance annot be determined, other means can be used in conjunaion, such as the fingers of the CDMA delay spread 
measurement, and any other TOA/f DOA cakubtions from other geographical poinu. In the case of a mobile station with a certain 
amount of shadow fading between ito BS 1 22 (Fig. 2). the first finger of a CDMA delay spread $*^na! is most likely to be a relatively 
storter duration than the case where the mobile statnn 1 40 ami BS 122 are separated by a greater distance, since shadow fading 
does not materially affect the arrival time delay of the radio signaL 

By perforro'mg a small modification in the control elearonics of the CDMA base statwn and mobik; station receiver 
circuitry, it is possible to provide the signal processing subsystem 20 (reference fig. I) within the Location system 42 (Pig. I) with 
data that exceed the one-to-one CDMA delay-spread fingers to data receWer correspondence. Such additional information, in the 
form of additional CDHA fingers (additional multipath) and all associated deteoable pilot channels, provides new information 
which is used to enhance to aauracy of the Location Center's locatnn estimate location estimate modules. 

This enhanced apability is provided via a control message, sent from the Loation system 42 to the mobile switch 
center 12. and then to the base station($) 122 (Pig. 2) in communication with, or in ctose proximity with, mobile stations 140 to be 
kjQted. Two types of location measurement request control messages are needed: one to insirua a target mobile station 140 (i.e., 
the mobile station to be located) to telemeter its BS pilot channel measurements back to the primary BS 1 22 and from there to the 
mobile switch center 1 12 and then to the loation system 42. The second comrol message is sent from the location system 42 to the 
mobile switch center 112, then to fint the primary BS 122, instrurting the primary BS' searcher receiver to output (i.e., return to 
the initiating request message source) the detected target mobile station 140 transmitter COMA pilot channel offset signal and their 
corresponding delay spread finger (peak) values and related relative signal strengths. 
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The control messages are implemented in sundard mobile station 140 and BS 122 CDMA receivers such that all data 
results from the search receiver and multiplexed results from the associated data receiven are available for transmission back to 
the Location Center 142. Appropriate value ranges are required regarding mobile station 140 parameters T ADO,, T_DROP,, and 
the ranges and values for the Aaive, Neighboring and Remaining Pilot sets registen, held within the mobile station 140 memory. 
Further mobile station 140 receiver details have been diKussed above. 

In the normal case without any specific multiplexing means to provide location measurements, exaaly how many CDMA 
pilot channels and delay spread fingers an or should be measured vary according to the number of data receiven contained in 
each mobile station 140. 

As a guide, it is preferred that whenever RF charaaeristia permit, at least three pilot channels and the strongest first 
three fingers, are collected and processed. 

From the BS 122 perspeaive, it is preferred that the strongest first four CDMA delay spread fingers and the mobile 
station power level be collected and sent to the location system 42. for each of preferably three BSs 122 which can detect the mobile 
statnn 140. 

Table SP-3 illustrates the resulting extended combinations of BS signals (pilot channels) and finger measurements 
potentially available, based on the above preferred comlitions. The philosophy is to collect as much reasonable data as is praaical, 
given the constraints of CDNA receivers^ search times» receiver memory storage and available CPU and data transmission 
bandwidth, in order that sufficient orthogonal information an be processed to minimize location estimate error. 
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Table SP-3: Extended CDMA Location Measurement Combinations 

As an be seen from the table, a mudi larger combination of measurements is potentially feasible using the extended 

S data colleaion capability of the CDMA receivers. In the case of the last row shown, additional combinations are also possible using a 
similar scheme of allocating the number of CDNA fingers deteaed at the first or strongest BS, followed by the second strongest base 
station, then the third stroi^est base suuon, etc 

Fig. 29 illustrates the components of the Signal Processing Subsystem 20. The main components consist of the input 
queue(s) 7. signal dassifier/Tiher 9, d'^iul signaling processor 17, imaging fdters 19, output queue(s) 21 . router/distributor 23, a 

1 0 s^nal processor daubase 26 and a signal processmg controller I S. 

Input queues 7 are required in order to stage the rapid accepunce of a significant amount of RF signal measurement 
data, used for either location estimate purposes or to accept autonomous location data. Each location request using fixed base 
stations may, m one embodiment, contain from I to I2B radio frequency measurements from the mobile station, which translates 
to approximately 61.44 kilobytes of signal measurement data to be colieaed within 10 seconds and 128 measurements from each of 

1 5 possibly four base stations, or 24S.76 kilobytes for all base statnns, for a total of approximately 640 signal measurements from the 
five sources, or 307 J kilobytes to arrive per mobile station location request in 10 seconds. An input queue storage space is assigned 
at the moment a location request begins, in order to establish a formatted data struaure in persistent store. Depending upon the 
urgency of the time required to render a location estimate, fewer or more signal measurement samples can be uian and stored in 
the input queue(s) 7 accordingly. 

20 The signal processing subsystem 20 supports a variety of wireless network signaling measurement apabilities by 

detecting the capabilities of the mobile and base station through messaging struaures provided bt the location application 
programming interface 14 in Fig. I. Detection is accomplished in the signal classifier 9 (Fig. 29) by referencing a mobile station 
database table within the signal processor database 26, which provides, given a mobile station identification number, mobile 
station revision code, other mobile stairon charaaersitics. Similiarly, a mobile switch center table 31 provides MSC characteristics 
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and identifications to the signal classifier/Tiher 9. The signal classifier/filter adds additional message header information that 
further classifies the measurement data which allows the digital signal processor and image filter components to selea the proper 
imemal processing subcomponents to perform operations on the signal measurement data, for use by the location estimate 
modules. 

5 Regarding service control point messages autonomously received from the input queue 7. the signal classifier/filter 9 

detemines via a signal processing database 26 query that the message is to be associated with a home base station module. Thus 
appropriate header information is added to the message, thus enabling the message to pass through the digital signal processor 17 
ureif fected to the output queu 21, and then to the router/distributor 23. The router/distributor 23 then routes the message to the 
HBS module 6 shown in Fig. I. Those skilled in the art will undersund that associating location requests from Home Base Station 

10 configurations require substantially less data: the mobile identifiation number and the associated wireline telephone number 

transmission from the home location register are on the order of less than 32 bytes. Consequentially the home base station message 
type could be routed without any digital signal processing. 

Output qu€ue(s) 21 are required for similar reasons as input queues 7: relatively large amounts of data must be held in a 
specific fonnat for further ioation processing by the location estimate modules. 

15 The router and distributor component 23 is responsible to diretting specific signal measurement data types and 

structures to their appropriate modules. For example^ the HBS module has no use for digiul filtering struaures, whereas the TDOA 
module would not be able to process an HBS response message. 

The controller 15 is responsible for staging the movement of data among the signal processing subsystem 20 componems 
input queue 7, digital signal proassor 17, router/distributor 23 and the output queue 21, and to initiate signal measurmems within 

20 the wireless network, in response from an internet 66 bcation request message in Fig. I , via the location application programming 
interface 14. 

In addition the controller 15 receives autonomous messages from the MSC . via the location applications programming 
interface 14 (Fig. I) or L-API and the mpui queue 7, whenever a 9-1-1 wireless call is originated. The mobile switch center provides 
this autonomous notification to the tocation system as follows: By specifiying the appropriate mobile switch center operations and 

25 maintenance commands to suiveil calls based on certain digits dialed such as 9- 1- 1, the location applications programming 

interface 14 (Fig. I), in commonaarions with the HSC 12a and 12b in Fig-I, receives an autom)mous notification whenever a mobile 
station user dials 9-M. Specifically, a bi-dircawnal authorized communicarions port is configured, usually at the operations and 
maintenance subsystem of the HSC 12a and 12b in Hg. I, or with their a&sodated networic element manager system(s), with a data 
circuit, such as a DS-l,with the teation applications programming interface 14 in fig. L Next, the "call trace" capability of the 

30 mobile switch center is aaivated for the respective communications port The exaa implementation of the vendor-specific man- 
machine or Open Systems Interface (OSI) commands(s) and their associated data structures generally vary among MSG vendors, 
however the trace function is generally available in various forms, and is required in order to comply with Federal Bureau of 
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Investigation authorities for wire tap purposes. After the appropriate surveillance commands are established on the NSC, such 9-M 
all notifications messages containing the mobile station identification number (MIN) and, in phase I E9- M implementations, a 
pseudo-automatic number idemication (a.lLa. pANI) which provides an association with the prima^ base station in which the 9-1- 
I caller is in communicaiton. In cases where the pAN I is known from the onset, the signal processing subsystem avoids querying the 
HSC in question to determine the prima^ base station identirication associated with the 9-i-l mobile station caller. 

After the signal processing controller 15 receives the first message type, the autonomous notification message from the 
mobile switch center 1 12 to the location system 42, containing the mobile identification number and optionally the primary base 
station identification, the controller IS queries the base station table 13 in the signal processor database 26 to determine the status 
and availability of any neighboring base stations, including those base stations of other CNRS in the area. The def'uiition of 
neighboring base stations include not only those within a provisionable ''hop" based on the cell design reuse faaor, but also 
inclines, in the case of CDNA, results from remaining set information autonomously queried to mobile stations, with results stored 
m the base station Ubie. Remaining set information indicates that mobile stations can detea other base station (seaor) pilot 
channels which may exceed the "hop" disunce, yet are nevertheless candidate base stations (or sectors) for wireless location 
purposes. Although cellular and digital cell design may vary, "hop** distance is usually one or iwo cell coverage areas away from the 
primary base station's all coverage area. 

Having determined a likely set of base stations which may both detect the mobile station's transmiiter signal, as well as 
to determine the set of likely pilot channels (Le.. base stations and their associated physical antenna seaon) detectable by the 
mobile station in the area surroundmg the primary base station (sector), the controller IS initiates messages to both the mobile 
station and appropriate base stations (secton) to perform signal measurements and to return the results of such measurements to 
the signal processing system regarding the mobile sution to be h)cated. This step may be accomplished via several interface means, 
lo a fint case tte controller IS utifizes, for a gmn NSC, predetermined storage information in the HSC table 31 to determine which 
type of commands, such as man-machine or OSl commands are needed to request such signal measruremenu for a given NSC 12a 
or 12b in Fig. L The controller generates the mobile and base station signal measuremem commands appropriate for the NSC and 
passes the commands via the input queue 7 and the locations application programming interface 14 in Fig.l , to the appropriate NSC 
12a and 12b, using the authorized communications port memioned eariier. In a second case the controller IS communkates direaly 
with base stations as discussed above and shown in Fig. 5, Location Center-base station access, multiple CNRS, in this second case 
an alternative embodiment is provided to directly extract the wireless k)cation signal measurement data from each base station 
associated with each of multiple CNRS networks within having to interface directly with the NSC for signal measurement extraaion. 

Upon receipt of the signal measurements, the signal classifier 9 examines location application programming interface- 
provided message header inforraatnn from the source of the tecation measurement (for example, from a fixed BS 122. a mobile 
station 140, a distributed antenna system 168 or message tocation data related to a home base station), provided by the location 
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to 



applications programming interface (L-API) via the input queue 7 and determines whether or not device filters 17 or image filters 
19 are needed, and assesses a relative priority in processing, such as an emergency versus a background location task, in terms of 
grouping like data associated with a given location request. In the case where multiple signal measurement requests are 
outstanding for various base statbns, some of which may be associated with a different CMRS network, and additional signal 
classifier f unaion includes sorting and associating the appropriate incoming signal measurements together such that the digital 
signal processor 17 processes related measurements in order to build ensemble data sets. Such ensembles allow for a variety of 
f unaions such as averaging, outlier removal over a timeperiod, and related filtering f unaions, and further prevent association 
errors from occuring in location estimate processing. 

Another funaion of the signal dassifier/low pass filter component 9 is to filter information that is not useable, or 
information that could introduce noise or the effect of noise in the location estimate modules. Consequently low pass matching 
filters are used to match the in-common signal processing components to the charaaeristia of the incoming signals. Low pass 
fitters match: Mobile Station, base statbn, CHRS and NSC characteristics, as wall as to classify Home Base Station messages. 

The signal processing subsystem 20 in Fig. i contains a base station database Ubie 13 (Fig. 29) which captures the 
maximum number of CDMA delay spread fingers for a given base station, containing information struaures as shown in table SP-4 



IS 



Primary Base 

Station 

Identification 


Latitude, 

Longitude« 

elevation 


Pilot Channel 
Offset 


BS 

identifier 
code 


Maximum No. of 
CDMA Fingers 


DEN^OI 


x.y,z 


5 


CODENABCOOl 


4 


DEN-002 




25 


CODENABC002 


4 


DEN-003 


s,t,u 


20 


CODENABC003 


3 


DEN-004 


a, b,c 


15 


CODENABC004 


4 


BLD.005 


d,e.f 


45 


COBLDABC005 


4 













Table SP-4: Base Station Characteristics 



The base station identification code, or Oil or common language level identification code is useful in identifying or 
20 relating a human-bbeled name descriptor to the Base Station. Latitude, Longitude and elevation values are used by other 
subsystems in the location system for calibration and estimation purposes. As base stations and/or receiver charaaeristia are 
added, deleted, or changed with respect to the network used for location purposes, this database table must be modified to reflea 
the current network configuratbn. 

Just as an upgraded base station may detea additional CDMA delay spread signals, newer or modified mobile stations 
2S may detea additional pifot channels or CDMA delay spread fingers. Additionally different makes and models of mobile stations may 
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aquirt improved receiver sensitivities, suggesting a greater coverage capability. The table below establishes the relationships 
among various mobile station equipment suppliers and certain technical data relevant to this location invention. 

Ahhough not strictly necessary. The KIN can be populated in this table from the PCS Service Provider^ Customer Care 
system during subscriber aarvation and fulfillment, and could be changed at deaaivation, or anytime the end>user changes mobile 
stations. Alternatively, since the NIN, manufacturer, model number, and software revision level information is available during a 
telephone all, this information couk) extraaed during the call, and the remaining fields populated dynamically, based on 
maoufaaurer*s* specifications information previously stored in the signal processing subsystem 20. Default values are used in cases 
where the MIN is not found, or where certain information must be estimated. 



Mobile Station 

identification 

(MIN) 


Manufact- 
urer 


Model 
No. 


Allowed 
S/W 
Itevislon 
Levels 


Maximum 
No. of 
CDMA 
Fingers 


Maxim 
um No. 
of 

Pilots 

Detecta 

ble 


Transmit 
Power 
Class 
(Max) 


Rec. 

Thermal 
Noise 
Floor 
(dBm) 


303456I234S67 


Sony 


S 


RI.0 


3 


3 


2 


-114 


3034561234568 


Qualcomm 


25 


R2.0I 


4 


4 


4 


•IIS 


3034561234569 


Panasonic 


20 


RI.1 


3 


3 


5 


-113 


3034561234570 


Fujutsbu 


15 


R2i 


4 


4 


0 


-116 


3034561234571 


Sony 


45 


RI.I 


3 


3 


7 


-115 


Default 


Default 


Default 


Rli) 


3 


3 


3 


.112 



Table SP-5: Mobile Station Characteristics Table 



A low pass mobile station filter, contained within the signal ctassifier/iow pass filter 9 of the signal processing 
subsystem 20, uses the above table data to perform the following functions: I) aa as a low pass filter to adjust the nominal 
assumptions related to the maximum number of CDHA fingers, pilots detectable; and 2) to determine the transmit power class and 
the receiver thermal noise floor. Given the detected leverse path signal nrength, the required value of SRSS^^ a corrected 
indication of the effeaive path loss in the reverse direction (mobile station to BS), an be calculated based on the SP-S table data 
contaiiKd within the mobile station table I U in the signal processing database 26. 

The effects of the maiimum Number of CDHA fingers allowed and the maximum number of pilot channels allowed 
essentially form a low pass filter effea, wherein the least common denominator of characteristics are used to filter the incoming Rf 
signal measurements such that a one for one matching occurs. The effea of the Transmit Power Class and Receiver Thermal Noise 
floor values is to normalize the characteristics of the incoming RF signals with respect to those RF signals used. 

Fig. 4, Location Provisioning from Multiple CNRSs, illustrates a system architecture to enable the customer care systems 
belonging to different CHRSs, either on an autonomous or periodic basis, to update a provisionable signal processing database 26, 
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(ontaining the mobile station doraaeristia, in communication with the signal classifier/Olter 9, input queue 7, and the location 
applications programming interface for customer casre systems (L-API-CCS) 139. The signal classifier/filter 20 is in communication 
with both the input queue 7 and the signal processing database 26. In the eariy stage of a location request the signal processing 
subsynem 142 in Fig. 4» will receive the initiating bation request from either an autonomous 9-M notification message from a 
S given NSC, or from a loation application (for example, see Fig. 36), for which mobile sution charaaeristics about the target 
mobile station MO (Fig. 2) is required. Referring to Fig. 29, a query is made from the signal processing controller 15 to the signal 
processning database 26, specifically the mobile station table II, to determine if the mobile station charaaeristics associated with 
the HIN to be located is available in table i I. if the data exists then there is no need for the controller IS to query the wireless 
network in order to determine the mobile station characteristia, thus avoiding additional real-time processing which would 

10 otherwise be required across the air interface, in order to determine the mobile station NIN characteristics. The resulting mobile 
station information my be provided either via the signal processing database 26 or ahemativeiy a que^ may be performed diredly 
from the signal processing subsystem 20 to the NSC in order to determine the mobile station charaaeristics. 

A location application programming interface* L-API-CG 139 to the appropriate CHRS customer care system provides 
the mechanism to populate and update the mobile station table 1 1 within the database 26. The l-API-CCS 139 conuins its own set 

IS of separate input and output queues or similar implementations and security controls to ensure that provisioning data is not sent 
to the incorrect CHRS. The interface MSSa to the customer care system for CHRS-A 1 150a provides an autonomous or periodic 
notiTication and response application layer protocol type, consisting of add, delete, change and verify message funaions in order to 
update the mobile station table 11 within the signal processing database 26, via the controller 15. A similar interface 1 155b is used 
to enable provisioning updates to be received from CNRS-B customer care system 1 150b. 

20 Although the L-API-CCS appliation message set may be any protocol type which supports the autonomous notification 

niessage with positive acknowledgment type, the TINIi group within the American National Sundards Institute has defined a 
good starting point in which the L-API-CCS could be implemented, using the robust OSI TNN X-interface at the service management 
layer. Tte objea model defined in Standards proposal number TIHI5/96*22R9, OpemtiomAdmmhtmm, haintetaaa, and 
FiQmoBiffg(Q/UUF) - thfklforlnterhce AcmsJurisdktmdBoundamsto Support Ekawnk Access Serrke Ordering: inquiry 

25 funahtty can be extended to support the L-API-CCS information elemenu as required and further discussed below. Other draices in 
which the UAPI*CCS application message set may be implemented include ASCII, bina7» or any encrypted message set encoding 
using the Internet protocols, such as TCP/IP, simple network management protocol, http, https, and email protocols. 

Referring to the digital signal processor (DSP) 17, in communication with the signal classifierAP fiher 9, the DSP 17 
provides a time series expansion method to convert non*H6S data from a format of an signal measure data ensemble of time-series 

30 based radio frequency data measurements, collected as discrete time-slice samples, to a three dimensional matrix loation data 
value image representation. Other techniques further fdter the resultant image in order to furnish a less noisy training and aauai 
data sample to the loatnn estimate modules. 

Referring now to digital signal and image filter processing, by way of example, a forward-path CDMA mobile station 
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deb/ spread RF measurement sample is illustrated in fig. 22, for the mobile station reception of one sample of transmission signal 
related to BS-I, looted at 16th and Stout Streets. In this sample three fingers or groups of RF energy (relative signal strength is 
indicated along the vertical axis) were detected. A first CDMA finger was found at a delay of about 3.4 microseconds, and relative 
signal strength of about -80 dBm. A second finger was found at a delay of about 5 microseconds, and peak strength of about -SS 
S dBm, followed by a third finger at 6i microseconds and a strength of about -92 dBm. Two other base stations were deteaed. BS>S 
and BS-2, along with their respeoive three CDMA delay spread fmgers. 

Refer now to the left image shown in Fig. 26: Delay Spread Profile image. After 128 samples of data are colleaed of the 
delay spread-relative signal strength RF data measurement sample: mobile station RX for BS-1 and grouped into a Quantization 
matrix, where rows constitute relative signal strength intervals and columns defme delay intervals. As each measurement row, 

10 column pair (which could be represented as a complex number or Cartesian point pair) is added to their respeaive values to 

generate a 2 direaion of frequency of recurring measurement value pairs or a density recurrence funaion. By next applying a grid 
funaion to each x, y» and z value, a three-dimensional surface grid is generated, which represents a location data value or unique 
print of that l2B-sample measurement Fig. 28 illustrates the result of image generation when a number of data samples, or an 
ensemble of signal strength, delay parts of values are added within a given bin area or matrix, to thus create a type of three- 

15 dimensional image, representing a particular RF signaling behavior at a given loation. 

Refer now to the right image shown in Fig. 26. In the general case where a mobile station is located in an env'uronment 
with varied clutter patterns, such as terrain undulations, unique man-made struaure geometries (thus creating varied muMpath 
signal behaviors), such as a city or suburb, although the first CDMA delay spread finger may be the same value for a fixed distance 
between the mobile station and BS antennas, as the mobile statbn moves across such an arc, different finger-data are measured. In 

20 the right image for the defined BS antenna sector, location classes, or squares numbered one through seven, are shown across a 
particular range of fine of position (LOP). 

A traditional TOA/FDOA ranging method between a given BS and mobile station only provides a range along the arc, 
thus introducing ambiguity error. However a unique three dimensional image can be used in this method to spec'rfically identify, 
with recurring probability, a particular unique location dass along the same Line Of Position, as long as the multipath is unique by 

2S position but generally repeatable, thus establishing a method of not only ranging, but also of complete latitude, longitude location 
estimation in a Cartesian space. In other words, the unique shape of the **mountain image" enables a correspondence to a given 
unique location class abi^ a Hne of position, thereby eliminating traditional ambiguity error. 

Although man-made external sources of interference, Rayleigh fades, adjacent and co-channel interference, and 
variable clutter, such as moving traffic introduce unpredictability (thus no "mountain image" would ever be exaaly alike), three 

30 basic types of filtering methods can be used to reduce matching/comparison error from a training case to a location request case: 
1.) selea only the strongest signals from the forward path (BS to mobile station) and reverse path (mobile station to BS), 2.) 
Convolute the forward path 128 sample image with the reverse path 128 sample image, and 3.) process all image samples through 
various digital image fihen to disQrd noise componenu. 
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The ttioiigest signal technique has been dijciiaed previoujly in the data filter section. Fig. 27: Convolution o( Foroard 
and Revene Inaps. iUuitiatei one method that essentially nulls noise completely, ewn if strong and recurring, as long as that 
same noise characteristic does not wcur in the opposite path. 

The third tKhniqoe of processing CDMA delay spread profile images through various digital image filters, provides a 
5 resultant "imag? enhancement- in the sense of providing a more stable pattern recognition paradigm to the neural net location 
estimate model. For example, image histogram eqoaliiation an be used, as illustrated in Fig. 30 (before equalitation) and 31 
(after equalization) to rearrange the nnages' intensity values, or density recurrence values, so that the image's cumulative 

histogram is approximately linear. 

Other methods which can be used to compensate for a concentrated histogram include: I) Input Cropping. 2) Output 
10 Cropping and 3) Gamma Correaion. Equalization and mput cropping an provide paiticulariy striking benefits to a CDMA delay 
spread profile image. Figs 32 and 33 illustrate the three dimensional grid images ol the before and alter input cropping filter 
example. As shown in f ig. 33. input cropping removes a large percemage of random signal charaaeristics that are non-recurring. 

Other friters and/or filter combmations can he used to help distinguish between stationary ami variable clutter 
affeamg mukipath signals. For example, it is desirable to reject multipatb fingers associated with variable chitter. since over a 
15 periodofafewminutessuthfingerswouldnotfikBlrrKur.Fuitherfilteringta«beusedtor«moye«^^ 

sample period), and possibly strong but narrow "pencils" of Rf energy. A narrow pencil hnage component couM be represented by 
a near perfect reflective surface, such as a nearby metal panel truck stopped at a traffic light 

On tiieoriierhawl. siationa^ dutlerohjects, such as concrete amJ glass building surfaces, adsorb some radiation 
before cominuuigwid.areflected ray at some dehy-Such stationary dutter-alfectt^ 
20 MighborHedianfilteraswellasa40to50percentlnprtCropfilter.anda«th«moresuitedtoneuralnetpa«^ 

Fig. 33 illustrate five "pencik" of COMA finger energy tiiat passed a simple 50 percent Input Crop filter. However, as shown in Fig. 
34 when subjected to a 4X4 neighbor Median fitor and 40 percem clipping, all five pencil-shaped fingers have been deleted, fig. 35 
•dh«t«te$ the further simpTified result of a 50 percent cropping and 4X4 neighbor ^^^^ 
custom linear fihertng. adaptive (Weiner) filtering, and custom nonlinear filtering. 
25 The DJP 17 may provkh daa emsemble results, such as extracting the shortest time delay with a deteaable relative 

signal strength, to die routtr/aistiihitor 23, or alttraarively results may be processed via one or more image filters 19, with 
snbsequew transmission to tiie rooter/distributor 23.The router/distributor 23 ex^^^^ 

17 ami stores routing ami distribution information in the message header. The router/distributor 23 then forwards the data 
messages to tiie output queue 21. for subsequem queuing then transmission to the appropriate loation estimators OA module 10. 
30 TQA/TDOAmodule8ortheHBSmodule6,inFig.l. 

HOME BASE STATION MODULE 

Upon receiving a messag? from the Data Capture Gateway orthe signal processing subsystem 20. the HBS location 
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estimate model examines a Home Base Station Table which defines relationships among a wireless MIN. and wireline telephone 
number, charaaerisiia of the HBSD, and the possibility to use various signal types in order to further define the locaiion within the 
address area of the faed location HBSD. The following table, populated by the commercial mobile radio service provider at HBSD 
installation time, is used by the HBS model to determine location whenever the mobile station MO is located within communication 
range of the HBSD: 



nIN 


Wireless 
nIN 


HBSD Model 


HBSD location 

Latitude, 

Longitude 


Fixed HBSD Location 


CDMA 

Strength/Delay 
Measurements ? 


30iSS61234 


30356(1299 


Sony Qx-9000.ilev. 1.1 


52.619488 N. 
112.4197601 W 


727 Hagnolia Drive, Boulder. 
CO 


No 


3035S61236 


3035661200 


Panasonic PF-130, Rev. 5.0 


52.645488 N, 

1(2.4197601 W 


1401 Digit Drive. 8ou(der, CO 


Yes 


3035S6I236 


3035661240 


Panaionic Pf-I3Q, Rev. 3.4 


52.779488 N, 
112.4197601 W 


1698 FoUom St.. Boulder, CO. 


No 


303SS6I284 


3035661205 


P^nasomcPF-IB0,IUv.5i> 


5L61948B N, 
111.9197601 W 


990 Nutaaclter Dr.. Miwot.CO. 


NO 


3035561224 


3035661266 


Panasonic Pf-SOOO, Hev. 1.0 


52.6(9558 N, 
II2.4I9760IW 


5606 Bismark Grcle. Denver, 
CO 


Yes 















In the event RF signals are available for tetemetry from the HBSD to the location system, such information may be 
solicited from the location system to the HBSD, in the form of a request/response message scheme, using for example, a data- 
under-voice technique. In such cases the SSP provides a data conneaion with the location synem 42 via the PSTN, The home base 
station may interact with the mobile statnn in the same manner as a cordless telephone transceiver interaas with a cordless 
telephone, when the mobile station b within an acceptable range. 

The HBS module 6 in Fig. I outputs the Latitude and Longitude location estiamtes to either the PSTN 24 or to the 
Internet 68, dependending upon the source of the originating location request. 

DiCTRIBUTED ANTENNA NODULE 

Upon receipt of one or more data ensemble messages from the signal processing subsystem 20 in fig. I, the distributed 
antenna (DA) module 10 queries a previously populated distributed antenna database to determine the locations of distributed 
antennas associated with the measured DA antenna "pilot delays" so that the deteaed signal measurement delay signal values 
received from the mobile station receivers and base station receivers can be input to the TOA/FDOA module. The TOA/IDOA module 
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then utiiiies the radius-radius method, or time difference method, in order to provide location estimates within the building or area 
containing the distributed antennas. 

DAISEY CHAINING BASE STATIONS 

As a praatcal matter it may be necessary in some network conditions to add base stations in areas to permit improved 
5 estimates to be achieved in wireless location. An aspect in this invention includes daisey chaining communication circuits or 
transport facilities between or among base stations, in order to simplify the installation and operation of such base stations. Base 
stations normally communiate with the mobile switch center using T-carrier transpon facilities, in order to carry voice and data 
bearer traffic, and to transport bi-direaional control signals. However for various economic or other reasons it may not be 
justifiable to install such transport facilities. At the base station, by essentially originating a plurality of mobile telephone calls 

10 using the data communications option, and terminating such calls at the mobile switch center appropriately, the outputs of the 
base sution transport multiplex circuits are re*directed into the data communication circuits normally intended for use by mobile 
stations in establishing a data circuit communication call to the network. Circuits at the mobile switch center used to terminate 
these data alls, redirea the communication to those circuits normally used to terminate the T-carrier facilities from the base 
stations, in this manner, existing wireless channels can be used to provide transport via this daisy-chaining method between ceoain 

IS base stations and the mobile switch center, thus simplifying conneaivity in cases where the installation of transport facilities wouk) 
either be impossible or impractial 

DISTANCE FIRST ORDER MODULE (TOA/TDOA) 

Particular distinctions over the current state of the art include utilizing essential}/ the native electronics, antennas and 
standards, and opposed to overlay solutions, supervisor funaions which control a hybrid set of techniques, including Time Of 

20 Arrival (TOA), Time Difference of Arrival (TDOA) in both the forward and reverse paths, pilot signal strengths, power control, 
mobile stations (mobile station) state conditions, stochastic features of environmental clutter, multipath deteaion and mitigation, 
and robustness, supporting a variety of conditions including degraded/faulty equipment, distributed and SHART antennas, various 
registration modes, aid various call processing conditions such as soft, hard and idle hand-off conditions, locatnn during the idle 
state, tralTic-bearing states, and ioation during cases of severe multipath, such as that experienced in urban anyon environments. 

2S as well as Ioation in suburban and rural cases. 

Since each base station is required to emit a constant signal-strength pitot pseudo-noise (PN) sequence on the forward 
link channel identified unique!/ in a network s/stem by a pibt sequence offset and frequency assignment, it is possible to use the 
pikit channels of active, andidate, neighboring and remaining sets of pilots, associated with neighboring base stations, stored in 
the mobile station, for TOA and TDOA measurements performed by the mobile station. 

30 Based on the arrival time measurement estimates and the speed of propagation, ranges or range differences between 

the base stations and the mobile station can be akulated. TOA and/or TDOA measurements can then be input to either the radius- 
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radiui multilatefation or the time difference multibteration algorithms. 

utilizing the known base sution positions, location of the mobile station can be determined. Since measurements 
and base station positions can be sent either to the network or the mobile station, location can be determined in either entity. 

Since not all measurements can provide accurate location resulu at all times and conditions, a variety of supervisory 
5 kigic processes can be invoked to resolve or litigate the problem area. 

As those familiar with the EIA/TIA IS-9S and TIPI/|TC CDMA standards specifications know, mobile station call 
processing consisu of four states: 

L lakializition State the mobile station seleas and acquires a system, a network, and timing information. This sute 
consists of four mbstzm: S/stem Determiaath/J, Pilot Channel Acqmsnton, Sync Channel Acgmsitm and liming Change 
10 Substate, 

1. Idle State - where the mobile station monitors messages on the Paging Channel, and suppons procedures such as Message 
Acknowledgment* nine modes of Registration, Idle Hand-off, Pilot Search, and response to Overhead information, such as 
System and Access Parameters (which include 6S Latitude and Longitude), mobile station Message Transmission Operation 
DaU Burst) and Neighboring List messages; 
15 3. System Actess State • where the mobile statmn sends messages to the base sution on the Access Ctannel. This state consists of 
six substates: Update Overhead, Origination Attempt, Page Response, mobile station Order/Message Response, Registration 
Access; Message Transmission Operatk»n/Data Burst); 
4. Mobik station Control on the T/aKc Oannel State - where the mobile station communicates with the primary base station 
using the forward and Reverse Traffic Channels. This state consists of five substates; reinitialization. Waiting for Mer, 
20 Waiting for nwbik station Answer, Conversathni^^k^ includes hand-off procedures and earliest arriving usable multipath 

components of pilots), and Kekase. 

At power-up an IS-9S or TIP! PO CDMA compliant mobile station enters Initialization State, as described in IS-9S, 
sectnn 6.6.1. During the System ^termiriashnixlbsmt, the mobile station refers to its internal memo7 to acquire preferences for 
synem canier (A or 6), or the preferred carrier at 1.8-2.0 GHz, and for other types of service, including advanced mobile phone 
2S service, or AMPS, as well as narrow band advanced mobile phone service, or NAMPS. 

A CDMA-preferred mobile station then transfen to the FihtAcqttisithn\v^o\mt, The mobile station tunes to the CDMA 

Channel number equal to CDMACH^ then sets its Walsh code (ahvays WQ) for the Pitot channel where it begins searching for pilot 

energy, in terms of energy per bit, per spectral density. 

Once a sufficiently strong (as defined by the T_ADD threshold parameter) pitot channel has been identified within 

JO T20m the mobile station enters the Sync Channel Acquisition Substate, where the mobile station receives a Sync channel 

Hessagetim includes, among other information, system time and the unique PN offset index for that particular BS. In the Timing 
O^i^ substate, the mobile station adjusu its internal timing to match the BS*s CDMA system time. At the completion of the 
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Timing Change substate, the mobile station is completely synchronized to the CDMA system's 6S time. 

After satisfaaory synchronization the mobile sution then enters the stable M? State, where the paging channel begins 
to be monitored. 

At this point at least two alternatives are possible: 
5 1. Perform Loation determination without consumption of user-perceived air time via the introduction of a new call . 
processing state, or 

2. Perform Location determination via the traffic channel (requires air time) 

In cases where Distributed Antennas (OAs), and/or Home Base Stations (HBS) are used, each location of these devices 
can be sent to the mobile station. There are at least three format-types possible in conveying this type of location information in 
10 the GeoLocation Message. First, A unique identifier can be assigned to each DA/HBS» such as a fully distinguished name. An example 
of toation information could be: Within the USA, State of Colorado, city of Denver, with Service Provider xyz, BS ID 129, 
Distributed Antenna number 6. Or more compaaly, the locaion string is struaured as, "USA.CO.DEN j(yz.l29.DA8**. Secondly, an 
easy-to-understand human style data message can be sent, such as, "You are near the 30th floor of the Sears Tower building". 
Third, data values for Latitude, Longitude, and possibly altitude and accuracy couid be sent from the BS or Location Center to the 
IS mobile stationAU CLU** denoting . In order to be most easily useful to and end-user, in the first and third ases, a database would 
be needed within the mobile station or a Personal Digital Assistant device, which performs a translation of numerical data into a 
form useful for human understanding. 

The mobile station thus maintains a list of (nation pilot offsets, where the list is ranked based on a weighted 
combination of received signal energy and BS location. The mobile sution selects the best Qndidate BSs for location estimate 
20 purposes, which may be slightly d'rfferem from the Active, andidate and remaining lists. 

Additionally the mobile station may send a Dau_Burst message back to the BS or Location Center, mforming that no 
other Pilot Channels were detected. Thb ^'negative'* Venn diagram information may be useful with various heuristics for kication 
estimate deduaion, for example, to note where the mobile station is not loated. 

It is the difference of system time values (as opposed to their absolute values) that is important. Note that for purposes 
25 of loQtion, any communication back to a BS 122 wouM require re-synchronizing onto that BS's system time. Although not specified 
in either IS-9S or TIPl/|TC*s PQ CDMA standards, most mobile station manufaaurers buiid correlators with resolutions of 
approximately 1/8 PN chip, which is about 125 nS. A bcation equipped mobile station will provide + A 125 nS. accuracy, which is 
about +/- 125 feet 

The mobile station or kKation entity can process the arrival time estimates in at least two ways, first the mobile station 
30 may difference the measurements (preferred) to form time-difference-of-arrivals (TDOA); or second, the mobile sution may 
determine absolute time-of-arrival (TOA) by solving for the clock bias between the mobile station and other CDMA system time 
reports. TOA requires very well alibrated BS system clocks among each other. 

The following procedure illustrates significant capabilities hidden in the CDMA standards, which provide a substantial 
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enabling base with which to provide the measurements and data for this inventions* location methods. 

First the BS sends the Neighbor List Update Message, containing a complete list of the neighboring pilot PN sequence 
offset indices (i.e., via the N6HBR_PN field) associated with candidate BSs in the area» with which the mobile station could 
possibly scan for deteaing usable earliest arriving neighboring useable BS multipath components. This list should typically be a 

5 complete list, as opposed to the presumed candidate subset. If the mobile station is not already in the Traffic/Conversation State, it 
could invoke this state by ailing a dialable telephone number in the network, e.g., a designed ''Quiet Line" This approach also 
allows a billing record to be generated according to routine wireless telephony praaice. If the network is to determine location, 
then the network pages the mobile station 140, conneaing the mobile station to a Quiec Line/Voice message upon mobile station 
answer. Note that it may be desirable to suppress the mobile station ringer sounding for certain location applications. Other 

1 0 methods may also be possible. 

During installation, each BS 122 in a particular area is provisioned with the locations of all possible neighboring BSs in 
its area. The BSs 122 use this information to populate a list of all Latitudes and Longitudes which can be sent to the LUs, using the 
MeigiiitorList Update mssage. Second, assuming that the mobile station does not currently have this data or if unknown, then the 
BS shall send a series of hol^k Station Repstered Messages, each message containing the latitude and Longitude values (i^., the 

15 BASE_LAT and BASE LONG fields) associated with a neighboring BS pilot PN offset sent with the first message. Note that the 

constants Supported Traffic Channel Candidate Actwe Set size, normally set to 6. and Ny^^, Supported Traffic Channel 

Candidate Set size, normally set to 5, and Ng,^, the Minimum Supported Neighbor Set size, normally set to 20, shoukl be sufficient 

for most location purposes, however these constants could be changed if the need arises. 

Third, the BS saves the current T_ADD and T DROP values in the BS memory, associated with the In-Traffic LU, and 

20 sends the fthTtaffic System Fataaieten}{z\s^p, which includes reduced T_ADD and T DROP parameter values, useable for 
location purposes. The value for T ADD would typically be set to a value near the tower end of the IS-98 specification, possibly 
bekiw the 80 dB dynamic range requirement, ckise to (but not including) the thermal noise power level of the LU receiver. Note 
that K the lU h using restricted battery, e^;., a portabte, then the time lor keeping T_AOD and T_DROP at a low value for location 
estimates purposes, should be kept short to conserve advene consequences, such as increased current drain and noise. 

25 Reduced T ADD and T DROP vatos sent to the mobile station will cause the LU to scan all concehnUe neighboring BS 

pitots provided to it by the BS, and to n^asure the strengths of each received pitot, and to determine the pitot arrival time for each 
pitot offset. Note that the signal strengths now measured may not be sufficient for carrying traffic, but may be sufficient for 
kication purposes. 

Assuming the network is to determine location, then the mobile station reports the arrWal time, PILOT ARRIVAL, for 
30 each pilot reported to the base station. According to the standard the arrival time is measured relative to the mobile station's time 
reference (which was previously determined from the aaive BS). in units of PN chips (1/2288) microseconds, or about 814 
nanoseconds, as folhms: 
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IS 

PIL0T_PN-PHASE=(PIL0TJ1«IVAL + {64XPILOT^PN))mod 2 , 

where PILOT PN is the PN sequence offset index of the pilot associated with the BS pilot indices in the neighbor list. 
In order to achieve location accuracy estimates on the order of a few hundred feet (or nanoseconds) a higher resolution 
than I PN chip is required. Although not specified direct!/ in IS-9S, most mobile manufaaurers use correlators with resolutions of 
5 approximately l/B PN chip, or about 102 nS (suggesting that if no other systemic errors are present, about 102 feet of error is 

expected). Note that the search window size SRCH^WIN A,. for each pilot may need to be increased if there are substantial delays 

experienced from the environment It is desirable for the mobile station to report the second and third arrival time (or the second 
and third fingers), and their relative signal strengths, corresponding to each detectable Pilot Channel. 

If more than one PILOT_ARRIVAL is available then a basic TDOA multilateration algorithm may be invoked, at either 
10 the lU, or the network. In the network ase, the aaive BS 122 must send a Pilot Request Order for Pilot Measurement Request 
Order (ORDER code 01 0001 ), which causes the mobile station 140 to forward its measurements to the BS (and consequently the 
network, as appropriate). 

At this point a minimally sufficient number of measurements are available to perform a location estimate. Thus the BS 
should restore the original T AOD and T_DROP values (previously saved in the BS memory) to the mobile station, via the In- 
IS Tiaffk System FarametenW^vagit. 

Additional information may be desirable, such as the artive BS' TOA measurement, as well as associated BS 
mcasuremenu of the mobile station's TOA to their BS location. This added information may be sent to the mobile station if the 
mobile station is to perform location, via the Data Bunt Messagewi the fotward Traffic ChaaneL Since 26 combinations of data 
burst types have been reserved for future use in the standard, dedication of several combinations could be used to telemeter 
20 location-related dau. In cases where duplicate ranging or other information is available, various supervisor techniques mentioned 
elsewhere in this document, couid be used to refine the location estimate. 

Once the location estimate has been performed, any number of means could be used to provide the results to the end 

user. 

The IS-9S and J-STD-008 CDMA specifiations require that BSs shouM be synchronized to within + A 3 microseconds of 
25 CDMA system time and shall be synchronized to within + /- 10 microseconds. This invention disctosure method assumes the cost of 
GPS receivers is relatively small, thus time alibiation at a more precise calibration level at each location BS is recommended to be 
used by using the very accurate GPS time parameters. Preferably the absolute error deviation among surrounding or neighboring 
base stations should be less than 800 nanoseconds, however in most cases this should not be a fixed requirement, but rather a 
preference. In cases where absolute BS timing is prohibitively expensive, then the ""Forced Hand-off" method discussed below can be 
30 used to overcome the preferred, or strict absolute BS timing requirements. 

Three methods have been currently identified. Some of these technk|ues apply to other air interface types as well. 
I. Use the first finger at BS (Absolute Ranging), and if detecteable, invoke a "Forced Hand-off" between the mobile station and a 
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neighboring BS, for a time sufficient to complete signal nieasurenients between a mobile station transmitter and a BS 
receiver, and if possible, between a BS transmitter and a mobile station receiver, which gives access to as many BS's 
as can be deteaed either bf the mobile station receiver or the surrounding BS receivers. 

2. Use the first fmger at mobile station (Differential Ranging) to obtain differential time readings of pilot channel from mobile 

station 

3. Use the Pilot Power Level Heasurements and Ground Clutter (Stochastic information) 

Now in the general case where three or more BSs can either determine TDOA and/or the mobile station can telemeter 

such data to the location entity within the network, repeat this method for BS2 and BS3, and BS3 and BS|. in order to determine 

the remaining curves, thus yielding location within a 2D space, in the case of 3D geometry (such as a muhi-stoiy building with 
multi-floor pico BS cells), the process must be repeated a fourth time in order to determine altitude. 
NATLAB HathWorks code to implement the above algorithms follows: 
€lear;hold off; 

i = sqrt(-i); 

itep^siie = 0.03; 

# Set up BS variables 
theta = pi/3»onB$(3J); 
D = IO»one$(3,l); 
1(1) =0; 
i(2)=D(l): 

z(3) = D(3)*exp(-jtheta(l)); 

# Define the distance parameters 
d = [0 6.4 ^.8]'; 

location! = Q; 
laation2 = Q; 
location3 == Q; 

# Iterate and solve for the location with respect to the fint BS (at (0.0) ) 
t2 = -pi:O.0S:0.05; 

fortl = -pi/3:0.05:0.05. 
tl =tl +0.001; 

rl = iy(eipQ»tl)^(i»a)).»(D(l)^(l)*exp(i»a)); 
f2 = L/(exp(j»tl)-€xp(j»t2)).*(D(l)-d(l)*exp(jni)); 
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temp = arg(rl); 

index = fmd(ab$(temp) = = min(abs(temp))); 
location! = [location l;r I (index)*exp(j*tl)]; 
end; 

5 forti = -pi/3:0.05:0.05 

tl =tl +0.001; 

rl = l./(exp(j»tl)^sxp(i*t2)) ♦(D(2)-<i(2)«exp(i*a)); 
r2 = l./(cxp0»tl)-exp(i«t2)) »(D(2)-d(2)*exp(i*tl)); 
temp = arg(rl); 

10 index = find(abs(temp) = = min(abs(temp))); 

location2 = [Iocation2;rl(index)*exp(j*tl)]; 
end; 

lorti ^ -pi^:0.05:0.05 

tl =ii+aooi; 

15 rl = l./(cxp0*tl)-exp0*t2)) •(D(l)-d(3)*cxp0*a)); 

r2 = L/(exp(i^tl)^p(i*t2)) •(D(l)-d(3)«eip(i»tl)); 
temp = arg(rl); 

index = rind(abs(temp) == min(abs(temp))); 
locations = [localion3*»rl(lnd€x)*exp(j*tl)]; 
20 end; 

location2 = Iocation2»exp(i»arg(2(3)-z(2))) -f z(2); 

locations = location3*exp(j*arg(i(l)-2(3))) -f i(3); 

setyrange (-10:1]: 

set xrange [-1:11]; 
25 plot(lw(l)]) 

hold on 

plot(locationl) 

plot(locatton2) 

plot(tocation3) 



WIRELESS LOCATION DATA COLLEQION 

it is worthwhile to discuss techniques for both obtaining the initial colleaion of verified location data» as welt as how 
additional location data can be obtained for updating the data in this data base in a straightforward cost-effeaive manner. 

Regarding both the obtaining of the initial colleaion of verified location data as well as gathering data updates, it is 
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believed that some of this data can be obtained from the initial and continued engineering of the base sution infrastruaure by the 
whreless telephony service pn)vider($) in the radio coverage area. Additional verified location data can be obtained by trained 
technicians driving and/or walking certain areas and periodically, at each of a plurality of locations: (a) determining a location 
estimate (using, for example, GPS if possible and/or offsets from GPS readings); and (b) using an mobile station MO at the location 

5 to generate location dau communication with the wireless base station infrastructure. 

Alternatively, it is a novel aspect of the present invention that a straightforward method and system for gathering 
verified location data has been discovered, wherein a conventional mobile station 140 can be used without any additional 
electronic or circuit modifiations. One embodiment of this method and system utilizes the personnel of businesses that travel 
predetermined routes through the radio coverage area (e.g., a delivery and/or pickup service) to generate such dau using a 

10 conventional mobile station 140 while traversing their routes through the radio coverage area. One example of such personnel is 
the postal workers, and in particular, the mail carriers having predetermined (likely repetitive) routes for mail pickup and/or 
delivery at predetermined sites (denoted hereinafter as •'mail pickup/delivery sites" or simply "mail sites"). By having such mail 
arrierseach carry a conventional mobile station 140 and periodically generate location data communication with the wireless 
base station infrastruaure at mail sites ak)ng their routes, additional verified location data can be added to the Location Dau 

15 Base 1129 cost effeaively. 

To describe how this can be performed, a brief description of further features available in a typical mobile station 140 is 
needed. At least some modules of mobile stadon 140 have the folbwing apabilit'ss: 

(27JI.I) a unique mobile station 140 identification number; in faa, every mobile sutran 140 must have such a number 
(its telephone number); 

20 (27 Ji) the mobile sution 140 has a display and a display memory for presenting stored data records having 

telephone numbers and related data to a user. Further* some portion of each data record is annotation and some portion is able to 
be transmitted to the wireless base statmn network. In particular, the mobile sution 140 is able to store and recall data records of 
sufficient size such that each data record may include the following informatioo for a corresponding mail pickup/delivery site along 
a maD route: (a) an address or other textual description data (e.g., an English-like description) of the mail pickup/delive^ site; (b) 

2S a predetermined telephone number; and (c) a numerical code (denoted the **site code" hereinafter) associated with the mail 
pickup/delivery site, wherein the site code is at least unique within a set of site codes corresponding to the liiail sites on the mail 
route. In one embodiment, the memory may store 99 or more such data records, and the display is scrollable through the data 
recofds; 

(2723) the mobile station 140 an have its display memory updated from either an RS232 port residing on the mobile 
30 station, or from an over-the-air activation capability of the wireless network; 

(272.4) the mobile station 140 has a pause feature, wherein a telephone number can be dialed, and after some 
predetermined number of seconds, additional predetermined data can be transmined either through additional explicit user 
request (e.g., a **hard pause**), or automatically (e.g^ a ''soft pause"). Moreover, the addirional predetermined dau can reside in 
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Assuming these features, the following steps can be performed for acquiring additional verified location data: 
(273.1) for (at least some of the) postal carriers having predetermined routes of addresses or locations visited, the 
postal carriers are each provided with an mobile stotion 140 having the capabilities described in (27.2.1 ) through (27.2.4) above. 

S wherein the memory in each provided mobile station has a corresponding list of data records for the addresses visited on the route 
of the postal carrier having the mobile station. Moreover, each such list has the data records in the same sequence as the postal 
carrier visits the corresponding mail sites, and each data record includes the information as in (27.2.2) for a corresponding mail 
site the postal carrier visiu on his/her mail route. More precisely, each of the data records has: (a) a description of the address or 
location of iu corresponding mail pickup/delivery site, (b) a telephone number for dialing a dau colleaion system for the location 

10 center 142 (or. alternatively, a reference to a memory area in the mobile station having this telephone number since it is likely to be 
the same number for most data records), and (c) a site code for the mail pickup/deliveiy site that is to be transmined after a 
predetermined soft pause time-out Note that the corresponding list of data records for a particular postal route may be 
downloaded from, for example, a computer at a post office (via the RS232 port of the mol«le station 140), or aliemaiively. the list 
may be provided to the mobile station 140 by an over-the-air anivation. fuithcr, there are various embodiments of over-the-air 

1 5 activation that may be utilized by the present invention. In one embodiment, the postal carrier dials a particular telephone number 
associated with data coOeamn system and identifies both him/herself by his/her personal identification number (PIN), and the 
postal route (via a route identifying code). Subsequently, the mail pickup and deliver sites along the uientified route are 
downloaded into the memo7 of the mobite station 140 via wireless ugoals to the mobile statmn 140. However, additbnal over- 
the-air techniques are also within the scope of tte present invention such as: 

20 (a) If tte postal carrier's route is already associated whh the arrier's PIN for over-the-air aaWation. then the carrier may only 
need to enter hit/her PIN. 

(b) If the mobile station 140 is already associated with a particular route, then the carrier may only need to aatvate the mobile 

^tion 140, or alternatively, enter his/her PIN for obtaining an over-the-air download of the route. 

(c) Regardless of how the trutial download of mail sites is provided to the mobile station 140, it is also an aspea of the presem 
25 invention that if there are more maU sites on a route than tl»re is sufficient memory to store corresponding data 

records in the mobile statmn, then the data records may be downloaded in successive segments, for example, if 
there are ISO mail sites on a particular route and storage for only 99 data records in the mobile station, then in one 
embodiment, a first segment of 98 data records for the first 98 mail pickup/delivery sites on the route are 
downkiaded together with a 99*^ data record for transmitting an encoding requesting a download of the next S2 
30 data records for the remaining mail shes. (Alternatively, the data collection system may monitor mobile station 

140 requesu and automatially detect the last location capture request of a downloaded segment, and 
subsequently automatially download the next segment of mail site data records). Accordingly, when the data 
records of the first segment have been utilized, a second segment may be downloaded into the mobile station 140. 
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Moreover, at the end of the last jegmem, the data colteaion system may cause the first segment for the route to be 
automatically downloaded into the mobile station 140 in preparation for the next traversal of the route. 
(273 J) Given that a download into the mobile station 140 of (at least a portion of) the data for a postal route has occurred , 
the postal carrier travening the route then iterativcly scrolls to the next data record on the list stored in the 
mobile station as he/she visits each corresponding mail pickup/dehve^ site, and aaivates the corresponding data 
record. That is, the following steps are performed at each mail pickup/delivefy site: 

(a) As the postal carrier arrives at each mail pickup/delivery site, he or she checb the scrollable mobile station 140 display to 

assure that the address or location of the mail pickup/delivery site is described by the data record in the portion of 
the mobile statwn display for aaivating associated data record insiruaions. 

(b) The postal carrier then merely presses a button (typically a "send" button) on the mobile station 140 for concurrently dialing 

the telephone number of the data colleaion system, and initiating the timer for the soft pause (in the mobile 
station 140) associated with the site code for the mail pickup/delivery site currently being visited. 

(c) Given that the soft pause is of sufficient length to allow for the data colleaion system call to be setup, the mobile station 140 

then transmits tin site code for the presem mail pickup/delivery site. 

(d) Upon fKeiving the telephone number of the mobile station 140 (via automatic number identification (AIN)). and the site code, 

the data collection system then performs the following steps: 

(dl) A retrieval of an identifier identifying the roirte (route id). Note this may be accomplished by using the telephone number of 
the mobile sution. That is, when the data colleaion system first detects that the mobile station 140 is to be used 
on a particular route, the telephone number of the mobile station and the route id may be associated in a data base 
so that the route id can be retrieved using the telephone number of the mobile station. . 

(d2) A retrieval of a location representation (e.g., latitude, longitude, amf possibly height) of the mail pickup/delivery site 

identified by the combinatnn of the route kl and the site code is performed by accessing a data base having, for 
each mail site, the foltowing associated dau items: the route id for the mail site, the site code, the mail site address 
(or location descriptNin),and the mail site h»catk)n representatron (e.g., latitude, tongitude. possibly height). 

(d3) A request to the tocation center 142 h issued indicating that the location data for the mobile station 140 (resulting from, 
e.gn the call being maintained between the mobile station and the data colleawn system) is to be retrieved from 
the wireless network, temporarily saved, and a tocation estimate for the mobile station is to be performed. 
Accordingly, the data collection system request to the tocation center 142 the folbwing: 

(i) the telephone number of the mobile statwn 140; 

(ii) the retrieved bcatkin of the mobile station 140 according to the route id and site code; 

(iii) a request for the bcatbn center 142 to perform a tocation estimate on the mobile station 140 and return the location 

estimate to the data colleaion system; 
(^) a request that the location center 142 retain the location lor the mobile 
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Station 140 and associate with it the location of the mobile station 140 received from the data colleaion system. 
Regarding step (iii), the location estimate may also include the steps temporarily increasing the mobile station 
tiansfflitter power level 

{27J3) Subsequently, given that the location center 142 performs as requested, when the data colleaion system receives the 
mobile station 140 location estimate from the location center, the data colleaion system first associates the returned mobile 
station loation estimate with the corresponding data colleaion system information regarding the mobile station, and 
secondly, performs "reasonability" tests on the information received from the mobile sotion 140 for deteaing. filtering 
and/or alerting systems and personnel whenever the postal arrier appears to be transmitting (via the mobile station 140) 
f ram a location different from what the route id and site code indicate. The following are examples of such reasonabilky tests: 

(a) If a threshold number of posul carrier transmittals disagree with the location center 142 estimate by a predetermined dntance 

(likely dependent upon area type), then tag these particular transmittals as problematic and mark all transmittals 
from the mobile sution 140 as suspea for "distance" inaccuracies. 

(b) If there is less than a threshold amount of time between cetoin postti carrier transmittals, then tag these particular 

transmitttis as proWeroatic and mark all transmittals from the mobile station 140 as suspea for "time- 
inaccuracies. 

(c) If an expeoed statistical deviation betwnn a sampling of the postal carrier transmituls ami the location estimates from the 

tocation center 142 va^ by more than a threshoW amount, then tag these partiailar transmittals as problematic 
ami markalltransmittalsfmm the mobile station 140 as suspea for "sotistical" inaccuracies. 

(d) Han eipeaed statistical deviation between a sampling of the times of the postal carrier transmittals and an expeaed timing 

between these tiammittals vary by more than a threshold amoum. then tag these particular transmitnls as 
probtematk and mark all transmittals from the mobile statkin 140 as suspea for "statistical" inaccuracies. 
(273.4) When suspea or problematic mobSe station tocatmn information a deteaed (e.g, incorrett site code) in step (2733). the 
data collection system may perform any of the following aatons: 

(a) Alert the postal carikr of proWematic and/br suspeded maccuracies in real time, after a certain number of transmituls or at a 

later time. Mote that such aleru as well as positive feedback at the end of the postal carrier's route (or segments 
theicoO may be advantageous in that it likely inhibits the postal carrier from experimenting with transmittals from 
kKations that are purposefully inaccurate, but at the same time provides suff kiently timely feedback to encourage 
a conscientious postal canier. 

(b) JUeit the Postal Seim of perceived disaepancies in the mobile station 140 transmittals by the posul carrier. 

(c) DispaKh tocation center technicians to the area to transmit duplkate signals. 

(273i) H the transmittal(s) fiom the mobile station 140 are not suspea. then the data colleawn system communicates with the 
hicatnn anter 142 for requesting that each kxation received from the mobile sution 140 be stored with its corresponding 
retrieved location (obtained in step (d2)) as a verified location value in the Location Dao Base 1 129. Alternatively, if the 
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transmittals from the mobile sution 140 are suspect, then the data colleaion system may communicate with the location 
center 142 ior requesting that at least some of the location data from the mobile station 140 be discarded. 

Note that a similar or identical procedure to the steps immediately above may be applied with other services/workers 
such as courier services, deliver services, meter readers, street sweepers, and bus drivers having predetermined routes. 

WIRELESS LOCATION APPUCATIONS 

After having determined wireless location from a base technology perspeaive, several applications are detailed below, 
which provhle the results of the location information to a variety of users in various channels and presentation schemes, for a 
number of useful reasons and under various conditions. The following applications are addressed: (1.) providing wireless location to 
the originator or another, using either the digital air interface voice channel or a wireline channel, and an automatic call 
distributon (2.) providing wireless location to the originator, or another, using either the digital air interface voice channel or a 
wireline channel, and a hunt group associated with the central office or a PBS group; (3.) providing wireless location to the 
originator or another, using either the digital air interface text paging, or short message service communications channel; (4.) 
providing wireless location to the originator or another, using the Internet, and in one embodiment, using netcasting or "Push" 
technology; (5.) seleaive group, multicast individualized direaions with optional Conferencing; (6.) rental car inventory control 
and dispatch; (7.) vocalized direaions and tracking; (8.) wireless loatmn and court ruling/criminal incarceration validation; (9.) 
flexible delivery of wireless Ideation information to public safety answering points; (10.) trigger-bascd invento^ and tracking; (I I.) 
group. e.g., family, safety and conditional notification; (12.) wireless location-based retail/merchandising services; (13.) iocatbn- 
based home/officeAehicle security management; (13.) infrastrurture-supponed wireless hication using hand-aauated direaional 
finding; (14.) infrastniaure-supported intelligent traffic and highway management; (IS.) Parametric-driven imelligent agem- 
based location services. Each of these wireless location applications is discussed in detail betow. 

Referring to Fig.36, a user (the initialing caller) desiring the location of a target mobile station 140a, such as a user at 
a telephone station 162 which is in communication with a tandem switch 489 or a user of an mobile station 140b, or any other 
telephone station user, such as a computer program, dials a publicly dialable telephone number which terminates on the automatk 
call distributor 546 (ACD), associated with the location center 142. If the caller originated from an mobile sution 102, then the call 
B processed via a base station 122 to a mobiles switch center 108. The mobile switch center recognizes the call is to be routed to the 
PSTH 124 via an interoffice trunk interface 600. The PSTN 124 completes the call to the ACD 546. via a trunk group interface 500. 
Note that the initiating alter could access the ACD 546 in any number of ways, including various Inter-LATA Carriers 492. via the 
public switched telephone networic (PSTN) 124. The ACD 546 includes a plurality of telephone network interface cards 508 which 
provide telephony channel associated signaling funaions, such as pulse dialing and deteaion. automatic number identification, 
winking, flash, off-hook voice synthesized answer, dual tone multi frequency (DTMF) deteawn, system intercept tones (i.e., busy, 
no-answer, out-of-service), disconnected, all progress, answer machine deteawn. text-to-speech and automatic speech 
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recognition. Note that some of these funaions may be implemented with associated digital signal processing cards conneaed to the 
iffitwork cards via an internal bus system. An assigned telephone network interface card 508 detects the incoming call, provides an 
off-hook (answer signal) to the calling party, then provides a text to speech (TTS) message, via an assigned text-to-speech card 512 
indiating the nature of the call to the user, collects the automatic number identification information if available (or optionally 
5 prompts the aller for this information), then proceeds to collea the mobile identification number (MIN) to be located. MIN 

collection, which is provided by the initiating aller through keypad signaling tones, can be achieved in several methods. In one case 
the network card S08 can request a TTS message via text-to-speech card SI2. which prompts the initiator to key in the MIN number 
by bypad DTHF signals, or an automatic speech recognition system an be used to collect the MIN digits. After the MIN digits have 
been colleaed, a loation request message is sent to a location appfication 146. The ioation appliatran 146, in concere with 

10 loation appliation interface I3S, in the loation synem 42, is in communiation with the location engine 139. Note that the 
loation engine 139 consists of the signal processing subsystem 20, and one or more loation estimate modules, DA module 10, 
TOA/TDOA mocule 8 or HBS module 6. The loation engine 139 initiates a series of messages, using the ioation appliation 
programming interface 136 to the mobile station 108. The loation appfiation programming interface 136 then communiates with 
one or more mobile switch centen 108, to determine whether or not the mobile station 140 to be loated can be kiated. Conditions 

15 regarding the loateabiiity of an mobile station 140 include, for example: mobile station MO powered off, mobile station 140 not in 
communication range, mobile station 140 roaming state not known, mobife station 140 not provisioned for service, and related 
conditions. If the mobile station 140 annot be loated then an appropriate error response message is provided to the initiating 
aller, via e-mail, using the web server 464 in communications with the Internet 468 via an Internet access channel 472 or 
alternatively the error response message may be sent to a text to speech ard 512, whkh is in communiations with the initiating 

20 caller via the telephone interface ard 508 and the ACD 546, which is in communiation via telephony interface circuits 500 to the 
PSTN 124. 

Note that in cases where rendering kiation estimate information is required on the Internet, the web server cna include 
the provision of a digital certifiate key, thus enabling a secure, encrypted communiation channel between the toation web server 
and the receiving client. One such digital enc^ption key apabiiity is a web server provided by Netscape Communiations, tnc and 

25 a digital certificate key provided by Verisign, Inc. both located in the state of California, Ui A 

The PSTN 124 completes routing of the response message to the initiating aller via routine telephony principles, as one 
skilled in the art will understand. Otherwise the mobile station 140 is toated using methods described in greater detail elsewhere 
herein. At a high level, the mobile switch center 1 12 is in communication with the appropriate base stations 122, and provides the 
loatran system 42 with the necessary signal and data results to enable a loation estimation to be performed by the location engine 

30 139. Once the loatkm has been determined by the loation engine 139 in terms of Latitude, Longitude and optional)/ height if 
known (in the form of a text string), the result is provkfed by to the initiator by inputting the location text string to a text-to- 
speech ard 5 12, in communiation whh the assigned telephone interface ard 508, via the automatic control distributor 546, 
completes the communiation path and toat'ion response back to the initiating user via the telephone interface 500 to the PSTN 
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124, and from the PSTN 124 to the initiating user. 

Altemat'nreiy the location results irom the location application 146 could be provided to the initiating caller or internet 
user via a web server 464 in communication with the Internet 468, via an Internet access channel 472 and a firewall 474. In 
another embodiment, the loatton resuhs determined by the location application 146 may be presented in terms of street addresses, 
S neighborhood areas, building names, and related means familiar to human users. The attemative location result can be achieved by 
previously storing a relationship between location descriptors familiar to humans and Latitude and Longitude range values in a 
map database S38. During the location request the location application 146 accesses the map database S3d, providing it with the 
Latitude and Longitude information in the form of a primary key which is then used to retrieve the location descriptor familiar to 
humans. Note that to those skilled in the art, the map database 538 and associated messaging between the map database 538 and 
1 0 the tocation application 146 can be implemented in any number technkiues. A straightforward approach includes defming a logical 
and physical data model using a relational database and designer environment, such as "ORAaE 2000** for the design and 
devetopment, using a relational database, such as the ^'ORACLE 73" database. 

In an attemative embodiment, the kication application 146 may be internal to the location system 142, as one skilled in 
the art will understand. 

1 5 Referring to Hg. 37, a user - the initiating caller, such as an mobile station 1 40b or desiring the kication of an mobile 

station l4Ga, signals to the primary base station 122, in conneaion with the mobile switch center I Oft via transpon facilities 176, 
The mobile switch center 1 12 is connected to the PSTN 124, via interoffice trunks 600. The initiating user dials a publicly dialable 
telephone number which is then routed through an end office 496, to a telephone interface card 247, via a telephone hunt group 
500. The hunt group SOO provides a telephony connection to the interface card 247 associated with the location system 228. The 

20 hunt group trunk interface SOO is provided from an end office telephone switch 496. Note tha the initiating caller could access the 
telephony interface card 508, via hunt group trunk interface 500 in any number of ways, including an InterLATA Carrier 492, via 
the public switched telephone network (PSTN) 124. The hunt group trunk interlace 500 is in communication with a plurality of 
telephone interface cards 508. The interface ards 247 provide telephony channel associated signaling functions, such as pulse 
dialing and detection, automatic number identirotion, winking, flash, off-hook voice synthesized answer, dual tone mutti 

25 frequency (DTNF) detection, system intercept tones (i.e., busy, no-answer, out-of-service), disconneaed, cat! progress, answer 
machine deteaion, text-to-speech and automatic speech recognition. An assigned network interface card 247 deteas the incoming 
call, provides an off-hook (answer signal) to the ailing party, then provides a text to speech (ITS) message indicating the nature 
of the call to the user, collects the automatic number identification information if available (or optionally prompts the caller for 
this information), then proceeds to collea the mobile identification number (MIN) to be located. MIN colleaion can be achieved in 

30 several methods. In one case the iKtwork card 247 can request a TTS message, generated by a voice synthesizer or text to speech 
ard 512, which prompts the initiator to key in the NIN number by keypad tone signals, or an automatic speech recognition system 
an be used to collect the NIN digits. After the NIN digits have been collected, a location request message is sent to an appliation 
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146 in the location lystem 42. The application 146 in location system 42 initiates a series of messages to the mobile switch center 
1 12, and optionally to the home location register 460, to determine whether or not the mobile station 140 to be located can be 
located. If the mobile station 140 cannot be located then an appropriate error response message is provided to the initiating caller, 
via e-mail, test to speech card 512, web server 464 in communications with the public Internet 468, or similar means. Alternatively 

5 the last known location can be provided, along with the time and date stamp of the last location, including an explanation that 
current location is not attainable. Otherwise the mobile station 140 is located using methods described in greater detail elsewhere 
in this patent At a high level, the mobile switch center 1 12 is in communiation with the appropriate base stations 122 and I22h, 
and provides the location system 42 with the necessaiy signal and data results to enable a location estimation to be performed by 
the loation system 42. Once the location has been determined by the location system 42 in terms of Latitude. Longitude and 

10 optionally height if known (in the form of a text string), the result is provkled back to the initiator by inpuning the location text 
string to a text-to-speech card 512. in communicatton with the assigned telephone interface card 508. The interface ard 508 then 
provides the audible, synthesized message containing the location estimate to the initiating caller. Alternatively the location resulu 
could be provided to the initiating caller via a web server 464 in communication with the Public Internet 468, using standard client 
request-response Internet protocols and technology, location system 42 access to a geographical information system or other 

15 mapping system couM also be used to further enhance the user understanding of the location on a map or similar graphical display. 

Referring to Fig. 38, a user (the initiating aller) desiring the location of an mobile station 140, such as a wireless user 
140 who has text paging service provisioi^, dials a publicly dialable telephone number, arried to the PSTN 124 which terminates 
on an end office 496 based hunt group interface 500, which in turn is in communication with the loation system 142. The mobile 
switch center 1 12, tocal tandem 317 and interLATA Carrier tandem 362 are in communication with the PSTN 124. as those skilled in 

20 the art will understand. Note that the initiating caller could also be a wireline user with an ordmary telephone station 162 in 

communication with a tocal tandem 489, conneaed to the PSTN 124. The initiating location request user couki access the telephony 
interface ards 512 via the hunt group 500. In other embodiments, including varwus Inter-LATA Carriers 492, via the public 
switched telephone networic (PSTN) 124. The hunt group interface 500 is in communication with a plurality of telephone network 
interface cards 512, which are in communication with the location applicatkin 146 . The telephone interface cards 5 1 2 provide 

25 ttlephony channel associated signaling functions, such as pulse dialing and detection, automatic number identification, winking, 
flash, off-hook voice synthesized answer, dual tone multi frequency (DTMF) detection, system intercept tones (i.e., busy, no-answer, 
ottt-of-service). disconnected. call progress, answer machine detertion, text-to-speech and automatic speech recognition. Note that 
some of these funrtions may be implemented with associated digital signal processing cards conneaed to the network cards via an 
internal bus system. An assigned telephony interface card 508 detects the incoming call, provides an off-hook (answer signal) to 

30 the calling party, then provides, if appropriate, a text to speech (ITS) message indicating the nature of the call to the user, colleas 
the automatic number identification information if available (or optionally prompts the caller for this information), then proceeds 
to collert the mobile identification number (MIN) to be located by sending a location request message to an application 146 in the 
location system 42. The mobile station MIN colkawn, provided through the communications channel established, is sent by the 
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initiating oiler through keypad signaling tones. This HIN colleaion process can be achieved in several methods. In one case the 
telephony interface card SI2 can request a text-to-speech message, generated by a text-to-speech card SI2, which prompu the 
initiator to key in the HIN number by keypad tone signals. In another case an automatic speech recognition system can be used to 
collect the MIN digits. In either case after the MIN digits have been coileaed, a location request message is sent to the location 
S system 142. The location system 42 initiates a series of messages to the mobile switch center 1 12, via the location applkations 
programming interface (L-API) 366, and optionally to the home location register 360, to determine whether or not the mobile 
station 140 to be located Qn in fact be located. Alternatively the last known location can be provided, along with the time and date 
stamp of the last location, including an explanation that current location is not attainable. Conditions regarding the locateability 
of an mobile station include, for example: mobile station 140 powered off, mobile station not in communication range, mobile 

10 station roaming state not known, mobile station 140 not provisuned for service, and related conditions. If the mobile station 140 
cannot be located then an appropriate error response message is provided to the initiating caller, via the service node for short 
messaging service 367. The service node is in communicatran with the loatnn system 42 using a common text paging interface 
369. The service node 107 accepu the loation text paging message from the location system 42 and communiates a request to 
page the initiating caller via a typical signaling system 7 link for paging purposes, to the mobile switch center 112. The mobile 

1 5 switch center 1 12 forwards the location text page information to the initiating caller via the appropriate base sutions 352 or 354, 
to the initiating mobile station 3S4. Otherwise the mobile statnn 140 is bated using methods described in greater detail 
elsewhere in thb patent At a high level, the mobile switch center 1 12 is in communication with the appropriate base stations 3S2, 
3S4, and provides the locatnn system 42 with the necessary signal and data results to enable a tocation estimation to be performed 
by the location system 42. Once the location has been determined by the location system 42 in terms of Latitude, Longitude and 

20 optionally height if known (in the form of a text string). The locatun result is provided by to the initiator by inputting the locatkin 
text string to the service node for short messaging service 367. The service node is in communication with the location system 42 
using a common text paging interface 369. The service node 367 accepts the loation text paging message from the location system 
42 and communiates a request to page the initiating aller via a typial signaling system 7 link for paging purposes, to the mobile 
switch center III The mobile switch center 1 12 forwards the kicatnn text page information to the initiating alter via the 

25 appropriate-base stations 122a or 122b, to the initiating mobile statbn 140, v'a a text-to-speecb ard 512, in communication with 
the assigned telephone mterface ard SOB. 

Referring to Fig. 39, a user (the initiating user) desiring the loation of an mobile station 140, who has a push 
technobgy tuner 484 associated with the user's client workstatbn 4B4, selects the bation channel in the area, and further 
specifies the mobile statbn(s) to be bated, with what frequency should the loation estimate be provided, and other related 
30 parameters, such as billing information. The user's client workstation 482 is in communication with the Internet, optionally via and 
encrypted communiatbns channel using, for example, Netsape's SSL 3 encryption/decryption technobgy. A push transmitter 472, 
connected to the Internet 468 via a web server 464, detects the client workstation 482 usefs request The transmitter 472 requests 
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Koation update information for specified mobile identification numben through a f irewall 474 and a publisher 478, in 
communiatioo with a location channel application 429 in the location system 42. The location system 42 initiates location requests 
for all mobile station mobile identification numben for which location information has been subscribed to. then provides the 
location results to the Ication channel application 429. 

The location system 42 initiates a series of messages to the mobile switch center 1 12, via the location applications 
programming interface (l-API) 136, and optionally to the home location register 460, to determine whether or not the mobile 
station 140 or others, to be located can in fact be located. Alternatively the last known location can be provided, along with the 
time and date stamp of the hit loation, including an explanation that current location is not attainable. Conditions regarding the 
Ratability of an mobile station 140 include, for example: mobile station 140 powered off, mobile station not in communication 
range, mobile sution 140 roaming state not known, mobile station 140 not provisioned for service, and related conditions. If the 
mobile station 140 cannot be Seated then an appropriate error response message is provided to the initiating client worbtation, 
via the push technology components location channel application 429, publisher 478, firewall 474, transmitter 472, web server 464, 
public Internet 468, to the client worksution 482. A similar communication mechanism is used to provide the subscribed-to client*s 
worksQtion 482 with attained location information. 

Note that the tocation channel coukl in faa provide a colleaion of mobile station 140 mobile identiHcation numben for 
focation purposes that are grouped by a particular market and/or customer organizatbn segment, f o r example, location channel 
number I could provide enhanced wireless 9-1-1 service to specific public safety answering points, channel number 2 could provide 
periodic wireless location information of a fleet of taxi cabs belonging to a particular company, to their dispatch operator, channel 
3 could provide wireless kication to a control center of a military organization, channel 4 couM provide wireless locatbn 
information of vehicles carrying hazardous materials, to a control center, and so forth. 

The tocation channel application 429 provkles the loation resulu to the publisher 478, which provides a method of 
adding the new location resulu to the transmitter, via firewall 474. The firewall 474, provides proteaton services between cenain 
systems and the Internet, such as preventing malicious users from accessing critical computing systems. 

The group multicast help, with individualized directions, are those whose are authorized and nearest, with text paging 
message instrualons on how to drive or navigate, to reach the initiating distress caller. Alternatively optional voice synthesis 
tecbnotogy couk) be used to aid one or more members to have spoken instruaion giving directions and/or instruaions for each 
member, to help them reach the distress caller. 

Referring to Fig. 40, an individual having a mobile station desires to make a distress call for help, or for some other 
reason. The distress caller with mobile statbn 102 dials a special telephone number, received by base station 104. which then sends 
the originating call setup request to the mobile switch center 108. The mobile switch center IDS routes the originating call through 
the PSTN 1 12 to an automatic call distributor (ACD) i 1 6. The ACD i 1 6 selects an available telephony interface circuit 1 20, which 
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answers the call and providing introductory mformation to the caller, such as a greeting message, progress of service, etc, using a 
voice synthesizer circuit card 124. Note that circuiu 120 and 124 may be combined as voice response units. The telephony interface 
circuit 120 collects the automatic number identification information if available in the call setup message or optionally prompts the 
caller for this information. This MIN collection process can be achieved in several methods. In one case the network telephony 
5 interface ard 120 can request a TTS message, generated by a voice synthesizer card 124, which prompts the initiator to key in their 
HIN number by keypad tone signals. In another case an automatic speech rKognition system can be used to collea the HiN digits, 
in either case after the HIN digits have been collected, a bcation request message is sent to the location system ! 28. The location 
system or location system or center (LC) 128 initiates a series of messages to the mobile switch center 1 08, via the location 
appliations programming interface (L-API) 166, to determine whether or not the mobile sution 102 to be located can in faa be 

10 located. If the mobile station 102 cannot be loated then an appropriate error response message is provided to the initiating caller. 
Otherwise the LC 128 determines the caller's location via methods discussed elsewhere in this patent. While this event is proceeding 
an application in the LS 128 references the initiating aller's bcation subscriber profile database 1 58 to determine if the caller 
alk)ws others to tocate him or her, and specifically which individuals are altowed to be informed of the caller's location. 

Assuming the caller altowrs location information to be sent out to a selea group, then the list of members mobile station 

IS jdentifiation numbers (l1IN)s are extracted from the profile database IS8, and an appliation in the LC 128 initiates a series of 
messages to the mobile switch center 108, via the location applications programming interface (L-APl) 166. to determine the 
tocadons of each of the users' mobile station mobile identification numbers associated with the member list Regarding those 
mobile station mobile identification numben nearest the distress caller, each member mobite station is dialed via a control message 
sent from an application in the LC I2B to the telephony interface card 120. A voice synthesizer card 124 or text to speech circuit is 

20 also patched in the ailing circuit path, to announce the purpose of the automated call to each member. The ACD 1 1 6 initiates the 
call request to each member via the PSTN 1 12, which connects to the mobile switch center 108, that ultimately rings the member 
mobile station 140 and 148 via base stations 132 and 152. An appticatwn in the LC 128 identifies a stan and finish location 
destination loation for a member, based on his/her current tocation as being the start k)cation, and the finish location being the 
distress caller's location at mobile station KIN 102. The application in the LC 128 initiates a hnp or similar Internet compatible 

25 protocol universal resource kxator (UM.) request via the web server/client 162 to the public Internet 1 63, which terminates on a 
maps, directnns web server 164. One such URL known to the authors is Lucem Technologies' http://wwwjnapsOnUsxom, which is 
provided for public use. The map/liredions seiver 164 queries the map base 168 via a direaions algorithm 170, and returns to the 
initiating http request, the tocatbn web server 162, with a list of instruaions to enable a user to navigate between a start location 
and end loation. Referring to Fig. 41, the information shown in the columns labeled "Turn "Direaions**. "And Go**, and/or 

30 ""Total Hiles^ an then be parsed from the hnp response information. Referring now to Fig. FIG. 40. this information can then be 
sent as a short text message, to the relevant mobile station 148 or 140 via the service node 1 82. using interface 557 to the mobile 
switch center 106, and relevant base stations 152 and 132, assuming each member mobile station has short message service 
provisioned. If this is not the case, the seivice node 182 will inform the appliation within the LS 1 28. which then inhiates an 
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alternative method of sending the stait-fumh kation navigation instnictions information via an appropriate voice synthesizer 
card 124 and aaociated ttlephony interface ard 120. The interface card 120 initiates an automated call to each appropriate 
member's mobik soion i4aand 140. via the telephony path including components ACD 1 16 in communication with the PSTN 1 12. 
which is in cominuniation with the mobile switch center 1 08. The mobile switch center 108 completes the r^^^^^ 
aU to the appropriate mobile station 148 and 140 using base sutions 152 and 132 respeaively. The above process is repeated for 
each nearby member's mobile station, thm allowing all nearby members to be notified that the distress caller needs help, with 
navigation instnictions to each member, which enables the member to reach the distressed aller.Var^^ 

include putting each relevant party in communication with each other via a conference call capability in the ACD 116. with or 
without providing location information and/or start-finish navigation instructions. 

An application in the location system utiliies periodic wireless location of appropriate rental cars, control cittuiu and 
controlcommunicationswithintherentalcar.and SKuredtransactionsacrossthe Internet, or similar means, in order to provide 
various tracking and control functions. Such functions allow renul car agencies to remotely control ami operate their rental cars in 
order to reduce operating cosusuchas storage and mamtenance. as wellas provide additional conven^^ 

car agency customers. 

Referring to fig. 42, a vehicle 578 containing various sensors ami acuiaton (not shown) used to. for example, lock and 
untock car doors, sense door position, keypad depttssions. sense the conditton of the engme and various subsystems, such as 
biakes. ehttrkal subsystems, sense the amount of various fluid levels, etc, is in communication with a vehicle-based tool area 
network 572. which is in tuni connected to amoKle station 140 containing asyKhro 

vehicle-based kcal area network may optionally contain a computer (m shown) lor control ami mterfacmg lunnions. The mobile 
station 140 is always in (»mmunication. using the radio air interface whh at least one base statnn I22g. ami possibly other base 
stations l22h.The base stations I22g and I22h are in communication with the mobile switch center 1 12 via transport facilities 178. 
The mobile switch center 112 isincommunicatnn with the toation system 142 and the pubBc switched telephone network 126 via 
imemfrice trunks 600. In addition the mobile swiuh cemer 1 12 b also in communication with the location system 142 via the 
hication system - mobile switthcenter physical interlace 178. The physical interface provides two-way conneaions to the location 
appHotkinsprogiammingimerface (L-API-HSC) 136, which is in communication with a location engine 139. which performs 
wheless kcatbn estimattans for the mobile station, which is permanently mounted in the vehicle 578. The tocation engine 
repiesems key oimponents within the hwtion system which together comprise the capability to perform wireless location 
estimations.The rental tar kotton application 146 is in communications wither the tocation engine 139 for purposes of initiating 
wir«less location requesu regarding the mobite station 140, as well as for receiving wireless tocation responses from the toation 
engine 139. The application 146 is in communications with the automatic all distributor 546 for purposes of initiating and 
receiving telephone alls to and from the public switch telephone network 126, via hum group interface 500. As one skilled in the 
art will appreciate, other interfaces (not shown) beyond hunt groups 500. an alttmatively be used, such as ISDN interface circuits. 
T-carrier and the like. The appliotan 146 is in communiaiion with a web server and client 464. which in turn is in communiation 

73 



SUBSTITUTE SHEET (RULE 26) 



wo 98/10S38 PCT/US97/15933 

with the Internet 466 via an Internet access interface 472. As those in the art will understand, an Internet access interface is 
typically provided by an Internet service provider, also there are other methods which could be used to complete the Internet 
connection. The rental car agency comains a wortatation or personal computer 582 with an Internet access interface 472 to the 
internet 468. The appliation 146 requests of the location engine to perform a location request periodically regarding the mobile 
sution 140, with the location response information provided the web server and client, 464. for each rental car or vehicle 
containing a mobile sution 140, the location, as well as various information about the rental car or vehicle can be ascenained via 
the above described infrastructure. 

An application in the location system operates in conjunction with an application in each public safety answering point 
(PSAP) that together provides various call handling functions to enable the P5AP to perform its work load efficiently and effeanrely 
toward unique emergency events unique to a given location. The application pair measures the number of emergency 9-M wireless 
calls originating from a particular geographical area or loation. Upon exceeding a provisional threshold value *'X", the application 
pair traps the next incoming all from the same location and provides a call Kreening funaion via a play announcement and collect 
digits aaivity. This aaivity alerts the originating caller that if their call relates to an incident at a particular location, then they are 
the •X+ 1 th" caller who has already notified the PSAP, amJ that no further caller discussion is required. However, if the caller's 
mtent does not rebte to the incident described above, then the caller is requested to press or say **one", or some similar keypad 
number, which then b coUeaed and causes the caller to be re-routed to the next available PSAP call taker. Alternatively if the 
originating oiler does not respond within a short time period, then the call is also re-routed to the next available PSAP call taker. 
The voice announcement may either be synthesized by a text-to-speech card, or an PSAP operator may store a voice message which 
describes the incident at the above-referenced location. 
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Patent Claims 

We claim: 

L An apparatus for locating a first mobile station for at least transmining and receiving radio signals, wherein said radio 
signals are received on a forward radio bandwidth and said radio signals are transmitted on a different reverse radio 
bandwidth, comprising: 

a first wireless network infrastructure for communicating with said first mobile station, said First wireless 
network infrastructure having: 

(Al) a plurality of spaced apart base stations for communkating via said radio signals with said first 
mobile station, and 

(A2) a mobile switching center for communiating with said first mobile sution. via said radio signals 
with the base statnns, wherein said mobile switching center also communicates with said 
plurality of base stations for receiving measurements of said radio signals, said measurements 
including: (i) first measurements of sakl radio signals received by said first mobile statkin in said 
forward radio bandwidth, and (li) second measurements of said radio signals transmitted by said 
first mobile station in said reverse radio bandwkfth; 
a location determining means for bating sakl first mobile sution, wherein said loation determining means 
receives sakl fint and second measurements from the mobile switching center for estimating a location of said first 
mobile statnn, wherein sakl estimate is a funaion of both said first measurements and sakl second measurements. 

2. An apparatus for locating a mobile station as claimed in Claim I, further including an interface means between sakl 

tocation determining means and said mobile switching center, wherein said interface means generates a locatwn 
request for a primary one of sakl base sutions to which said first mobile signaling means is in communication. 

3. An apparatus for tocating a mobile station as claimed in Claim I , (unher including a means for requesting data related 

to additional radk) signals between said first mobile statkm and at least a second wireless network infrastruaure 
different from said first wireless network infrastruaure. 

4. An apparatus for locating a mobile statwn as claimed in Qaim I . wherein sakl first wireless network infrastructure is 

capable of communoting at least one of voice and visual information with said first mobile sUtion. 

5. An apparatus for locating a mobile station, comprising: 

a wireless network infrastruaure for communicating with a plurality of mobile statwns, each said mobile 
station for transmitting and receiving wireless signals, wherein said wireless signals are received in a f oiward 
bandwidth and said wireless signals are transmitted in a different reverse bandwidth, and, said wireless network 
infrastruaure having a plurality of spaced apart base statkins for communiating via said wireless signals with said 
plurality of mobile statnns; 
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a loation determining means for communicating with said plurality of mobile stations, via said radio signals 
with the base stations, wherein said loation determining means communicates with said plurality of base stations 
for receiving measurements related to said radio signals for euimating a location of at least a first ol said plurality 
of mobile stations, said measurements including: (i) first measurements of said wireless signals received by said first 
mobile station in said forward radio bandwidth, and (ii) second measurements of said wireless signals transmitted 
by said fim mobile station in said reverse radio bandwidth; 

wherein said location determining means estimates a location of said first mobile station using both said first 
measurements and said second measurements. 

6. An apparatus for locating a mobile station as claimed in Claim S, wherein said second measurements are determined 

from said wireless signals being received by said base stations. 

7. An apparatus for locating a mobile station as claimed in Claim 5, wherein said measurements include at ieasi one of: a 

delay spread, a signal strength, a ratio of energy per bit versus signal to noise, a word error rate, a frame error rate, 
a mobile signaling means, a power control value, a pilot index, a finger identification, an arrival time, an 
identifotion of said ftrst mobile station for communicating with the wireless network inf rastruaure, a make of said 
first mobile station, a revision of said fint mobile station, a sector identification of one of the base stations receiving 
said radio signals transmitted from said first mobile station. 

8. An apparatus for locating a mobile station as claimed in Claim S, wherein said radio signals are communicated using 

one of: CDNA, W-CDHA, TONA and advanced mobile phone service. 
9» An apparatus for locating a mobile station as claimed in Chim S, wherein said location determining means includes a 
location estimator using time difference of arrival data from said measurements. 

10. An apparatus for locating a mobile station as claimed in Claim 9, wherein said location estimator receives said 
measurements from a distributed antenia system. 

1 1. An apparatus for bcatmg a mobile sution as claimed in Claim 9, wherein said location estimator rKeives aaive, 

candidate and remaining set information from said first mobile signaling means. 
II An apparatus for locating a mobile station as claimed in Claim I, wherein said location determining means includes: 
a receiving means for recehring fint data related to at feast one of said first measurements and said second 
measurements between said first mobile station and said wbeless network infrastruaure; 
activating a first kication estimator for outputting a first estimate of a location of said first mobile station when 
supplied with location information from said receiving means, said location information related to the first data; 
outpuning said first estimate of the location of said first mobile station when said first estimate has an extent less 
than or equal to a predetermined size; 

activating a second location estimator for outputting a second estimate of a location of said first mobile station 
when said first location estimator does not provide said first estimate having an extent less than or equal to a 
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predetermined size; 

outputting an estimate of the location of said first mobile station when said second location estimator provides said 
second estimate. 

13. A method for locating a wireless mobile station, comprising: transmitting, by a first short range transceiver station, a 
5 status change related to whether the mobile station and said first short range transceiver station are able to 

wirelessiy communicate through a telephony network to a predetermined storage; storing, in said predetermined 
storage, said status of a mobile station, wherein said status has a first value when the mobile station communicates 
with said short range transceiver station as a cordless telephone, and said status has a second value when the mobile 
station communicates with a network of base stations, wherein said base stations are cooperatively linked for 
10 providing wireless communication; deteaing, by saki first short range transceiver station, a change accessing said 

predetermined storage for determining a location of the mobile station. 

14. A method for locating a wireless mobile station, as claimed in Claim IS, wherein said short range transceiver is a home 
base station. 

15. A method for looting a wireless mobile station, as claimed in Qaim I), wherein said predetermined storage is 
15 accessible via one of: an autonomous notification messaj^ and a request-response message. 

1 6. A method for locat'mg a wireless molHle station, as claimed in Qaim 13, wherein said predetermined storage is a home 

location register. 

17. A method for locating a wireless mobile station, as claimed in Claim 13, wherein said predetermined storage includes 
one or more of the folbwing data items related to said mobite station: mobile station identif iatkm number, short 

20 range transceiver identification ami mobile switch center identification. 

18. A method for tocating a wreless mobile statkm, as claimed m Claim 13, wherein said step of accessing includes 
responding to a query of said predetermined storage location using an identification of the mobile station. 

19. A method for kxating a wireless mobile station, as claimed in Claim 13, further including providing said status from 
said predetermined storage together with an Mentification of the mobile station to a mobile sution loatkm 

25 estimator for estimating a location of the mobile station. 

20. A method for bation a wireless mobile station, as claimed in claim 17, wherein said step of transmining further 
includes associating said change with a predetermined futed location and said shon range transceiver identification. 

21. A method for k>ation a vrireless mobile statran, as claimed in claim 13, wherein said step of accessing includes 

translating the mobile identification number and said short range transceiver identification into a predetermined 
30 location when the status has said first predetermined value. 

22. A method for bcation a wireless mobile station, as claimed in claim 13, funher including a prior step of provisroning a 
translating database from a customer care system containing the location of the short range transceiver. 

23. A method for looting a wireless mobile station, comprising: receiving data of wireless signals communicated between 
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a mobile station and a wireless network; deteaing, using said first data, that the mobile station is in wireless 
communiation with a distributed antenna system having a plurality of antennas conneaed in series and distributed 
along a signal condudng Kne so that there is a predetermined signal time delay between said antennas and at 
predetermined locations; determining a plurality of signal time delay measurements for signals transmined between 
the mobile station and a collection of some of said antennas, wherein said signals are also communicated through 
said line; estimating a location of the mobile station using said plurality of signal time delay measurements. 

24. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 
correlating each measurement of said plurality of signal time delay measurements with a unique corresponding one 
of said antennas. 

25. A method for loattng a wireless mobile station as claimed in Claim lA, wherein said step of estimating includes: 
identifying a plurality of antennas in said colleaion using correlation obtained in said step of correlating; 
determining a corresponding signal time delay between the mobile station and each antenna in said collection; 
determining a location of each antenna in said colleaion; estimating a location of the mobile station using said 
corresponding signal time delays and said locations of each antenna in said colleaion. 

26. A method for bating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 
determining* for said signal time delay measurements, a common signal time delay corresponding to transmitting 
signals from said distributed antenna system to a receiver of the fint wireless network. 

27. A method for kxating a wtreleu mobile station as claimed in Claim 23, wherein said step of estimating includes using 
an absolute delay time with respea to a pilot channel for a base station on the wireless network. 

28. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 
performing a triangulatbn using values related to one of: a signal time of arrival and a signal time difference of 
arrival for time difference of arrival airresponding to each antenna in said colleaion. 

29. A method for toating a wireless mobile station, as claimed in Claim 23 wherein said step of estimating includes a step 
of uimputing a most I'rialy locatnn of said mobile station using a fuzzy logic computation. 

30. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of activating includes 
aaWating one of: 

(a) a kxatron estimator for determining whether the mobile station is deteaed by a base station of the 

network, wherein said base station communicates with the mobile statnn as a cordless telephone; 

(b) a location estimator for estimating a location of the mobile station using location information obtained 

from saki distributed antenna system; 

(c) a location estimator for estimating a location of the mobile station by one of: triangulation and 

trilateratbn. 

3 1 . A method for locating a wireless mobile station, comprising: first receiving first signal charaaeristic measurements of 

78 



SUBSTITUTE SHEET (RULE 26) 



wo 98/10538 PCT/US97/15933 

wireless signals communiated between a mobile station and a First network of base stations, wherein said base 
stations in the first network are cooperat'nrely linked by a fim wireless service provider for providing wireless 
communicatwn; instructing the mobile station to search for a wireless signal from a second network of base stations 
that are cooperatively linked by a second wireless service provider for providing wireless communication, wherein 
said first and second wireless service providers are different; second receiving second signal charaaeristic 
measurements of wireless signals communicated between the mobile station and said second network of base 
stations; estimating a location of the mobile station using said first and second signal charaaeristic measurements. 

32. A method for locating a wireless mobile station as claimed in Claim 31, wherein the mobile station is registered for a 
wireless communication service with the fint wireless service provider, and the mobile station is not registered for 
the wireless communication service with the second wireless servke provider. 

33. A method for locating a wireless mobile station as claimed in Claim 31, wherein said step of instruaing includes 
transmitting a command to the mobile station for instruaing the mobile station to search for a signal from a base 
station of said second wireless service provider in a frequency bandwidth differem from a frequency bandwidth for 
communicating with the base stations of said first wireless service provider. 

34. A method for kicatii^ a wireless mobile stadon as claimed m Cbim 3 1 , wherein said step of instruaing includes 
transmming a command to the mobile sution for instruaing the mobile station to hand-off from said first service 
provider to a base station associated with said second service provider, for purposes of performing additional signal 
measurements. 

35. A method for tooting a wireless mobile station as claimed in Claim 3 1, wherein said first signal charaaeristic 

measurements include measurements for time delay, signal strength pairs of signal communicated from at least one 
of: 

(a) the base stations of said first network to the mobile station, and 

(b) the mobile station to the base statkins of said first network, and 

wherein said second signal characteristic measurements include measurements for time delay, signal strength pairs 
of signals communicated from the base statiom of said second network to the mobile station. 

36. A method for tecating a wireless mobile sution, comprising: receiving first data related to wireless signals 
communiated between a mobile station and at least a first network of a plurality of commercial mobile service 
provider networks of base stations, wherein for each said network, there is a plurality of base stations for at least 
one of transmitting and receiving wireless signals with a plurality of mobile suiions; instruaing the mobile station 
to communicate with a sewnd network of the plurality of networks for supplying second data; aaivating a mobile 
station location estimator, when said first and second dau are obtained for providing an estimate of a location of 
the mobile station. 

37. A method for locating a wireless mobile station, as claimed in Claim 36. wherein said second network includes a 
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second plurality of base sutioiu, wherein a majority of base stations in said second plurality of base sutions has a 
loation different from the locations of base stations in said first network. 

38. A method for locating a wireless mobile station, as claimed in Claim 36, wherein at least one of said first and second 
data includes signal characteristic measurements of communication with the mobile station for a time interval of less 
than 10 seconds. 

39. A method for locating a wireless mobile station, comprising: fint receiving first signal charaaeristic measurements of 
wireless signals communicated between a mobile sution and a first network of base stations, wherein said base 
stations in the first network are cooperatively linked by a first wireless service provider for providing wireless 
communicatwn; instrutting a second network of base stations that are cooperatively linked by a second wireless 
service provider for providir^ wireless communkation so that the second network searches for wireless signals from 
the mobile station, wherein said first and second wireless service providers are different; second receiving second 
signal characteristic measurements of wireless signals communicated between the mobile station and said second 
network of base sutions; estimating a kadm of the mobile station using said first and second signal charaaeristic 
measurements. 

40. A method for locating a wireless mobile station, as claimed in Claim 39, further including a step of requesting the 
mobile station to raise it's transmitter power level to a predetermined level, prior to said step of instructing. 

41. A method for locatiif a wireless mobile station, comprising: receiving, by a rneiving means, first data related to 
wireless signals communicated between a mobile station and at least a first networic of a plurality of commercial 
mobile service provider networics, wherein for each saki network, there are a plurality of communication stations for 
at least one of transmitting and receiving wireless signals with a plurality of mobile stations; first aaivating a 
tocatbn estimator for providing a first estimate of a tocation of the mobile statbn when supplied with first location 
informatran from saki receiving means, said first h)cation information related to the first data; 

when one of: (a) saki first estimate does not exist, and (b) said first estimate has an extent greater than or equal to 
a predetermined size, the steps (Ai) and (A2) are performed: 

(Al) instructing the moUle statnn to communkate with a secomi network of the plurality of networks for supplying 

second data to saM receiving means, wherein sakJ second data is related to wireless signals communicated 

between the mobile statran and the second network; 
(A2) second aaivating said toQtbn estimator a second time for provHIing a second estimate of a loation of the 

mobile statnn when supplied with additional location informatran from saki receiving means, sakf additional 

location information related to the second data; 
outputting at least one of the estimates of the location of the mobile station provided by said locatnn estimator 
when saki location estimator provides at least one estimate of the location of the mobile station. 

42. A method for kicating a wireless mobile station as claimed in Claim 41, wherein said additional ktcation information 
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and said first tocation information are utilized together by said location estimator. 

43. A methcMl of tooting a wireless mobile station as claimed in Claim 41, wherein said communication stations include 
wireless base stations for one of CDMA, TONA, and GSM. 

44. A method of locating a wireless mobile station as claimed in Claim 43, wherein said communication stations include 
5 home base stations. 

45. A method of locating a wireless mobile station as claimed in Claim4l , wherein the mobile station includes one of: a 

CDMA transmitter, a TDMA transmitter, and a GSM transmitter, and a AMPS transmitter. 

46. A method for locating a wireless mobile station as claimed in Claim 41 , wherein one or more of said aaivating steps 
includes: 

10 (a) said location estimator for determining whether the mobile station is deteaed by a communication station 

which commimicates with the mobile station as a cordless telephone; 

(b) said location estimator for estimating a location of the mobile station using location information related 

to data from a distributed antenna system; 

(c) said hxation estimator for estimating a location of the mobile station by one of: triangulation and 
IS trilateration. 

47. A method for locating a wireless mobile station as claimed in Claim 41, wherein said predetermined extern is less than 
one thousand feet 

48. A method for locating a wireless mobile station, comprising: receiving, by a receiving means, first data related to 
wireless «gnals nmmunicated between a mobile station and at least a first network of one or more commercial 

20 mobile service provider networb, wherein for each said network, there is a different plurality of base sutions for at 

least one of transmitting and receiving wireless signals with a plurality of mobile stations; activating a first location 
estimator for outputtmg a first estimate of a location of the mobile station when supplied with location information 
from said receiving means, said tocation information related to the first data; outpuning said first estimate of the 
tocation of the mobik station when said first estimate has an extent less than or equal to a predetermined size; 

25 activating a second toation estimator for outputting a second estimate of a location of the mobile station when said 

first toatton estimator does not provide said first estimate having an extent less than or equal to a predetermined 
size; outputting an estimate of the tocation of tiie mobite station when said second location estimator provides said 
second estimate. 

49. A metiiod for tocating a wireless mobile station as claimed in Claim 48 further including a step of instruaing the 

30 mobile sUtion to communicate with a second network of the plurality of networks for supplying second data to said 

receiving means, wherein said second data is related to wireless signals communicated between the mobile station 
and the second networL 

50. A metiiod for bearing a wireless mobile station as claimed in Claim 49, wherein said step of instruaing includes a 
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Step of instriKting the mobile station to hand-off to said second network for synchronizing timing signals and 
performing measurements between the mobile station an said second network. 

51 . A method for locating a wireless mobile sution as daimed in Claim 48, wherein one or more of said aaivaiing steps 
includes aaivating one of: 

S (a) a location estimator for determining whether the mobile station is detected by one of the base stations 

which communicates with the mobile station as a cordless telephone; 

(b) a loation estimator for estimating a loation of the mobile station usmg location information related to 

data from a distributed antenna system; 

(c) a location estimator for estimating a location of the mobile station by one of: criangulation and 
10 trilateration. 

52. A method for locating a mobile station, comprising: receiving, by said mobile station, a request control message from 
one of a pluratity of base stations, wherein said message is received by a receiving antenna of said mobile station; 
the control message providing information related to said message to at least one of a control processor and a 
searcher receiver in said mobile station; determining, using at least one of said control processor and said searcher 

IS receiver, a pturafity of pairs of radio signal strength related values and corresponding signal time delays for a 

wireieu communication between said mobile station and at least a first of the base stations, wherein for at least 
some of said pairv said signal time delays are different, and for each pair, said signal strength related value for said 
pair is obtained using a signal strength of said communication at said corresponding signal time delay of said pair; 
transmitt'mg signab for said pairs to one or more of the base stations via a transmining antenna of said mobile 

20 station; routing data for at least one of said pairs from said one or more base stations to a mobile station location 

estimator for estimating a location of said mobile station. 

53. A method for locating a mobile station, as claimed in Claim S2, wherein said uep of receiving uses one of a CDMA, an 
AMPS, a NANPS and a TDNA wireless standard. 

54. A method for locating a mobile statron, as daimed in Claim S2, wherein said step of determining is performed for a 
2S wireless communication between said mobile station and each of a plurality of the base stations. 

55. A method for locating a mobile station, as daimed in Claim S2, wherein each of said signal time delays is included 
within a predetermined corresponding time delay spread. 

56. A method for loating a mobile station, as claimed in Claim S2, wherein said step of determining includes a step of 
instructing, by said control processor, said searcher receiver to output a plurality of said radio signal strength 

30 related values for a plurality of fingers resulting from said communication from said first base station to said mobile 

station. 

57. A method for locating a mobile statbn, as claimed in Claim S2, wherein said step of determining includes inputting 
data for said pairs to a modulator for modulating said data prior to said step of transmitting. 
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58. A method for loQtinga mobife station, as claimed in Claim 57, further including a step of establishing a software 
controllable data connection between said control processor and a mobile station component including at least one 
of: a user digital baseband component and said modulator, wtwrein said conneaion inputs said data to said 
component. 

59. A method for locating a mobile station, as claimed in Claim 52 further including a step of providing said data for said 
pairs to a mobile station location estimating system having a first mobile station location estimating component 
using time difference of arrival measurements for locating said mobile station via one of trilateration and 
triangulation. 

60. A method for locating a mobile station, as claimed in Claim 59, wherein said step of providing includes seleaing one 
of: said first n»bile station estimating component, a second mobile sution estimating component using data 
obtained from a distributed antenna system, and a third mobile station estimating component for using data 
obtained from activation of a home base sution. 

61. A method for locating a mobile station, as claimed in Qaim 60, funher including a step of computing a most likely 
loQtion of said mobile station using a fuzzy logic computation. 

62. A method for locating a mobite statmn, as claimed in Claim 61, wherein said step of computing is performed by said 
second mobile station estimating component for determining a most likely floor that said mobile station resides in a 
multi-story building having a distributed antenna system. 

63. A method for locadi^ a mobile station, as claimed in Claim 59, further including a step of requesting data for 
additmnal pairs of radb signal strength related values and corresponding signal time delays for a wireless 
communicatbn between said mobile station and at least a second base station of a commercial mobife radio service 
provider different from a commercial mobile service provider for said fint base station. 

64. A method for obtaining data related to wireless signal characteristic, comprising: providing a user with a mobile 
station for use when the user traverses a route having one or more predetermined route locations, wherein one or 
more of the route locations have a corresponding telephone number and a corresponding description stored in the 
mobile station; performing the following substeps when the user visits each of the route locations: aaivating a call to 
said correspond'mg telephone number; transmittirig a code identifying the route location when the user is 
substantially at the route location; storing an association of: 

(a) signal characteristic measurements for wireless communication between the mobile station 

and one or more base stations, and 

(b) a unique identifier for the route location obtained using said code transmined by said call; 
Wherein said stored signal characteristic measurements are accessible using said unique 

identifier. 

65. A method as ci^med in Qaim 64, wherein said unique identifier corresponds to one of: (a) an address for the route 
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loation» and (b) a latitude and longitude of the route loation. 

66. A metfiod as daimed in Claim 64, wherein said route is periodically traversed by a user having a mobile station for 
accomplishing said step of performing. 

67. A method as claimed in Claim 64, wherein said step of storing includes retaining said signal characterbtic 
measuremems in a data storage for analyzing signal characteristic measurements of wireless communications 
between mobile stations and a wireless infrastructure of base sutions. 

68. A method as daimed in Claim 64, further induding. prior to said step of activating, a step of determining, by the 
user, that a display on the mobile station uniquely identifies that said corresponding description of the route 
loQUon is available for calling said corresponding telephone number and transmitting said identifying code. 

69. A method as claimed in Qaim 64, wherein said step of storing indudes: obtaining a phone number identifying the 
mobile station; providing said phone number identifying the mobile station to a commercial mobile radio service 
provider in a request for said signal charaaeristic measurements. 

70. A method as claimed in Cbim 64» wherein said step of storing includes using a phone number identifying the mobile 
station in combination with said transmitted identifying code for determining said unique identifier. 

7 1. A method as daimed *m Claim 64, wherein said corresponding description includes at least one of: a textual 

description of its corresponding route loation, and an address of its corresponding route location. 

72. A method as claimed in Claim 64, further including steps of: associating said identifying code for the route location 
and said unique identifier in a data storage prior to performing said step of performing; accessing said data storage 
using s»d identifying code for obtaining said unique identifier in said step of storing. 

73. A method as claimed in Claim 64, further induding a step of accessing said stored signal charaaeristic measuremenu 
for enhandiig a performance of a process for locating mobile stations. 

74. A method as claimed in Claim 64, wherein at least two of said one or more base stations are in networks of different 
commercial mobile radio service providers. 

75. A method as claimed in Claim 64. further including a step of filtering said signal charaaeristic measuremems so that 
when said signal characteristic measurements are suspected of being transmitted from a location substantially 
d'rfferent from the route loation, said step of storing is one of: (a) not performed, and (b) performed so as to 
indicate that said signal characteristic measurements are suspea 

76. A method as daimed in Claim 75. wherein said step of fihering indudes at least one of: (a) determinmg an amount by 
which an estimated location of the mobile station using said signal characteristic measurements differs from a 
location of the mobile station obtained from said unique identifien (b) determining whether a predetermined 
amount of time has elapsed between successive performances of said step of aaivating. 

77. A method for locatii^ a wireless mobile station, comprising: 

first receiving firu signal diaracteristic measurements of wireless signals communicated between a mobile station 
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and a first network of tase statiom, wherein said first signal characteristic measurements includes: 

(a) one or more pairs of wireless signal strength related values and corresponding signal time delays for a 

wir«tess communication between the mobile stetion and at least a first of the base stations; 

(b) data identifying operatbnal charaaeristics of the mobile sution including information related to a signal 

transmission power for the mobile station and information for determining a maximum transmission 

power level of the mobile sution; 
adjusting, for at least one of said pairs, its corresponding wireless signal strength, using said data, thereby obtaining 
corresponding adjusted pairs, wherein each adjusted pair has the corresponding adjusted signal strength, and 
wherein said adjusted signal strength is an expected signal strength of a predetermined standardized mobile sution 
transmitter power level having a predetermined maximum transmission power and operating at a predetermined 
transmission power level; 

outputting second signal charaaeristk information, obuined using said adjusted signal strength, to a mobile sution 
loation estimator for determining a location estimate of said first mobile station. 

78. A method for locating a mobile sution as claimed in Claim 77. further including applying sequence of one or more 
signal processing filten to one of: said pain and said adjusted pairs. 

79. A method for tooting a mobile station as claimed in Claim 78, wherein said sequence of filters is dependent upon a 
corresponding mobile sUtion location estimator. 

80. A method for locating a mobile station as claimed in Oaim 79, wherein said sequence of filten is pipelined so that for 
first and second filters of said sequence, an output of said fint filter is an input to said second fiher. 

81. A method for loatmg a mobile sution as daimed in Claim 79, wherein said filters include Sobel. Weiner, median ami 
ne'^bor. 

82. A method for locating a wireless motule sution, comprising: 

fint receiving first signal characteristk measurements of wireless signals communiQted between a mobile sution 
and a first network of base sutions, wherein said first signal charaaeristic measurementt includes one or more pairs 
of wireless signal strength related values and corresponding signal time delays for a wireless communiation between 
the mobile sution and at least a first of the base sutions; 

categorizing said pairs into categories according to ranges of signal strength related values and ranges of 
corresponding signal time delays for obuining a represemation of a frequency of occurrence of said one or more 
pairs in said categories; 

applying one or more filters to said represemation for one of: (a) reducing characteristics of said rcpresenution that 
are expected to be insufficiently repeauble for use in identKying a location of the mobile sution, and (b) enhancing 
a s^nal to noise ratio; 

supplying an output obtained from said step of applying to a mobile sution loation estimator; 
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estimating a locatioii of the mobile station using said mobile station bcation estimator. 

83. A metbod for locating a wireless mobile station as claimed in Claim 82. further including a step of requesting data for 

additional pain of wireless signal urength related values and corresponding signal time delays for a wireless 
transmission between the mobile station and at least a second base station of a second network of base stations 
different from the base stations of the fim network, wherein said first and second networb communicate with the 
mobile station in different signal bandwidths. 

84. A method for looting a wireless mobile station as claimed in Claim 83, wherein the first network is operated by a first 
commercial mobile radb service provider and the second network is operated by a second commercial mobile radio 
servke provider. 

85. A method for bating a wireless mobile sution as claimed in Claim 82, wherein said representation corresponds to a 

histogram. 

8^. A method for looting a wireless mobile station as claimed in Claim 82, further including a step of normalizing one of: 
(a) said pairs, and (b) values corresponding to said output 

87. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of aaivaiing further includes 

the step of applying a fuzzy logk module which further discretizes the location estimate provided from one of: 

(a) a location estimator for estimating a location of the mobile station using location information obuined 

from saM distributed amenna system; 

(b) a location estimator for enimating a loation of the mobile station by one of: triangulation and 

triiateratioo. 

88. A method for contacting a telephony statnn, comprising: associating, by a user, a particular telephony number with a 

collection of one or more telephony station numben of telephony stations with which the user desires to 
communicate when saM partkular telephoi^ number is called from a predetermined tetephony station; receiving 
sakl particular telephony number from the predetermined telephony station; determining a location of said 
predetermined cekpfaony statkm and at least some of said telephony stations having telephony station numbers in 
said colleaion; seleaing a first of sakl telephony stations having telephony staion numbers in said colleaion. 
wherein saM first telephony station is selected according to a kicatwn of sakl predetermined telephony station and a 
bcation of first telephony siatwn; uansm'iting a user desired message to said first telei^ny sution. 

89. A method for tocatin a mobile statnn, comprising: establishing, by a user of a particular mobile station, a a)lleakm of 

^entities of one or more persons having perm'isswn to receive a bcatnn of said particular mobile station; receiving 
a request by a first of said persons for locating saki partkular mobile station; determining a loaibn of said 
partkular mobile station in response to said request, said bcatnn determined using measurements of wireless 
transmissions between said particular mobile station and a fim wireless network of base stations, wherein said base 
sutnns are cooperatively I'mked for wireless communkatkin; outputting sakl tocatbn to the fint person. 
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90. A method as claimed in Claim89» wherein said step of detennining includes using measurements of wireless 

tramsmissions between said particular mobile station and a second wireless network of base stations provided by a 
different commercial wireless service provider from a commercial wireless service provider for the first wireless 
network. 

5 9L An apparatus for locating a mobile station as claimed in Claim 3, further including a means ior providing a location 

estimate using the Internet 

92. An apparatus for locating a mobile station as claimed in Claim 3, further including a means for providing a location 
estimate using the Internet. 

93. Ao apparatus for locating a mobile station as claimed in Claim 3. further including a means for providing a locatron 
10 estimate using digital certificate keys and the Internet 

94. An apparatus for locating a mobile station as claimed in Claim 91. further including a means for providing a location 
estimate using push technology on the Internet. 
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FIG. 8: DA Installation Procedure for Wireless Location 



8/41 




10/41 



wo 98/10538 



PCT/US97/15933 




11/41 



wo 98/10538 



PCT/US97/15933 




3 

111 
O 



< 

CO 

o 
< 

a: 

Q. 
CO 

—1 

ILI 

o 

Lli 

m 

1 

o 
< 

• ■ 
CM 

d 



12/41 



wo 98/10538 



PCT/US97/15933 




13/41 



wo 9S/10518 



PCT/US97/15933 




14/41 



wo 98/10538 



PCT/US97/15933 



526 



510 



ANTENNA 
1 



512 



DIPLEXER 



ANALOG 
RECEIVER 



SEARCHER 
RECEIVER 



524 



DIGITAL 

DATA 

RECEIVER 



_Z1 



522 



DIGITAL 

DATA 

RECEIVER 



-520 



DIGITAL 

DATA 

RECEIVER 



534 



CONTROL ^ 
PROCESSOR 



/I 



516 



TRANSMIT 

POWER 

AMPLIFIER 



1 



550 



TRANSMIT 

POWER 

CONTROL 



538 



DIVERSITY 
COMBINER 
& DECODER 



542 



USER 
DIGITAL 
BASEBAND 



546 



TRANSMIT 
MODULATOR 



FIG. 15: CDMA Mobile Station Prior Art 
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FIG. 16: MS Modification for RF Signal Telemetry 
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Figure 17: Location and a Home Base Station 
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Fig. 20: MS at location detects BSs lb and 2a 




Fig. 21: IMS at location C, detects only BS 1a 
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